i am trying to setup a IPsec bridge between my home network and my office network. I want to use StrongSwan to encrypt the traffic as IPsec
i am trying to follow this guide
A brief description of the networks:
the office network has 3 machines connected to an inexpensive D-link router, 2 of them are linux boxes, and should be able to be accessed from the IPsec network. The other machine is Windows and should not see any IPsec traffic
the home network has 2 machines, one is linux, which should be able to access and be accessed from the IPsec network. The other machine is windows and should not see any IPsec traffic
I'm not sure how to go about this, but i have 3 questions that are of high concern right now to me:
1) first a general question; assuming its possible and practical to arrange pre-sharing on secrets outside the internet (which in this case it is) would manual setup of keys be in general safer than setting up IKE or IKEv2?
2) i've read a bit about subnetting, and according to my interpretation of the strongswan documentation, i should set a site-to-site network, but i'm not sure where should i look for the right/left/rightsubnet/leftsubnet ip and masks to configure ipsec. EDIT To be more precise, i am looking at the
ifconfig output and trying to decide how to translate this to configure rightsubnet/leftsubnet. What machines constitutes the gateways? Any ideas? sorry if this question is extremely trivial
3) I want to make a test IPsec network at home using virtualbox machines before deploying any setup in the real networks. Would this work? how many virtual machines would i need to make a realistic scenario?
thanks for your patience
(btw, i still don't have enough reputation to create the "strongswan" tag. If someone creates it i'll be glad to update the post with it)