up vote 1 down vote favorite
2
share [g+] share [fb]

As per subject. I have heard of default IPsec support on later versions of Linux kernel (without need to recompile or install special packages) but maybe it's a rumour?

Interested in both VPN connectivity scenarios:
- Server-to-Server (e.g. interconnecting geo-distibuted networks)
- Client-to-Server (Windows, iPhone and Blackberry users connecting to the VPN server to access all/part of corp network)

link|improve this question
80% accept rate
feedback

1 Answer

up vote 2 down vote accepted

Yes, modern kernels support ipsec natively since 2.5+ which is a long time.

you will need to install userspace tools, but they are available in any modern distro so nothing "special" about them

generic howto is here

http://lartc.org/howto/lartc.ipsec.html

I would recomment to start with illustrated guide to ipsec as you will have to know how ipsec works if you want to set it up.

http://www.unixwiz.net/techtips/iguide-ipsec.html

link|improve this answer
Can lartc be used to allow client vpn? such as Android powered phone accessing VPN? – Alex Oct 27 '11 at 4:16
also, according to howto on lartc.org, it seems the kernel does need to be recompiled with PF_KEY etc. What is the advantage over strongswan, which claims no need to mod/recompile kernel. – Alex Oct 27 '11 at 4:22
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.