Line 15:
Line 15:
The contrib basically works but there can be complications when you want to combine it with standard host-host ipsec connections. The issue that 'may' arise is if an IPSEC connection is matched prior to the L2TPD one. I do have them both running on my test box but need more feedback on this.
The contrib basically works but there can be complications when you want to combine it with standard host-host ipsec connections. The issue that 'may' arise is if an IPSEC connection is matched prior to the L2TPD one. I do have them both running on my test box but need more feedback on this.
−
As of 0.2-4 you can enable or disable VPN access for users via the Server Manager.
+
You can enable or disable VPN access for users via the Server Manager.
These links discuss the implementation and the creation of this page.
These links discuss the implementation and the creation of this page.
https://forums.contribs.org/index.php/topic,53021.0/all.html
https://forums.contribs.org/index.php/topic,53021.0/all.html
+
+
Some further reading can be found on this page:
https://github.com/reetp/smeserver-libreswan-xl2tpd/blob/master/ipsecXl2tpd.Notes
https://github.com/reetp/smeserver-libreswan-xl2tpd/blob/master/ipsecXl2tpd.Notes
Line 32:
Line 34:
{{Note box|Server MUST be in Server/Gateway mode for this to be enabled}}
{{Note box|Server MUST be in Server/Gateway mode for this to be enabled}}
−
You will need to add my repo and the EPEL repo to run the installation.
+
The smeserver-libreswan-xl2tpd contrib is currently in the development repo at Contribs
−
https://wiki.contribs.org/User:ReetP
+
You will need the EPEL repo as well:
https://wiki.contribs.org/Epel
https://wiki.contribs.org/Epel
Line 40:
Line 42:
With the yum repo database updated, you can then run the installation of the package.
With the yum repo database updated, you can then run the installation of the package.
−
yum --enablerepo=reetp,epel install smeserver-libreswan-xl2tpd
+
yum --enablerepo=smedev,epel install smeserver-libreswan-xl2tpd
That should bring everything in, including ipsec which is required
That should bring everything in, including ipsec which is required
Line 60:
Line 62:
<br><br>
<br><br>
* passwd <br>
* passwd <br>
−
IPsec pre shared key as per db connection below. <br>
+
IPsec pre shared key as per ipsec db connection below. Every user will need this common password.<br>
'''Make it long and complicated !'''
'''Make it long and complicated !'''
−
<br><br>
+
<br><br>db ipsec_connections setprop L2TPD-PSK password SomeLongComplicatedSecret
+
* DNS<br>
* DNS<br>
defaults to the SME server. Can add extra servers if required
defaults to the SME server. Can add extra servers if required
−
<br><br>
+
<br><br> config setprop xl2tpd DNS 8.8.8.8,8.8.4.4
+
* debug<Br>
* debug<Br>
defaults to disabled
defaults to disabled
Line 149:
Line 153:
Only released version in smecontrib are listed here.
Only released version in smecontrib are listed here.
−
{{ #smechangelog: {{lc:{{FULLPAGENAME}}}} }}
+
{{#smechangelog: {{lc:{{FULLPAGENAME}}}} }}
[[Category: Contrib]]
[[Category: Contrib]]