IPSec

From ProgClub
Jump to: navigation, search

IPSec is a project to get IPSec working between hosts on the ProgClub network. For other projects see Projects.

Project status

Cancelled. Too hard. Didn't get IKE working with racoon, but that was no big deal, we only have three hosts so manual keying is no drama. Had SSH and HTTP connectivity after configuring MSS values of 200 in order to get IPSec packets through, prior to that they were being dropped; but couldn't get Kerberos connectivity. An MSS of 200 is really low, so there would have been perf issues. But, even an MSS of 100 wouldn't solve the Kerberos connectivity issue, so I give up.

Links

IPSec related information

IPTables related information

Racoon related information

TCP/IP related information

Google searches

Forums I've asked on

Offers of help!

Come ask me (Zanchey) on irc://irc.ucc.asn.au/ucc some time. I've just spent the last week fiddling with IPsec at the University Computer Club in WA.