Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

As per subject. I have heard of default IPsec support on later versions of Linux kernel (without need to recompile or install special packages) but maybe it's a rumour?

Interested in both VPN connectivity scenarios:
- Server-to-Server (e.g. interconnecting geo-distibuted networks)
- Client-to-Server (Windows, iPhone and Blackberry users connecting to the VPN server to access all/part of corp network)

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Yes, modern kernels support ipsec natively since 2.5+ which is a long time.

you will need to install userspace tools, but they are available in any modern distro so nothing "special" about them

generic howto is here

http://lartc.org/howto/lartc.ipsec.html

I would recomment to start with illustrated guide to ipsec as you will have to know how ipsec works if you want to set it up.

http://www.unixwiz.net/techtips/iguide-ipsec.html

share|improve this answer
    
Can lartc be used to allow client vpn? such as Android powered phone accessing VPN? –  Alex Oct 27 '11 at 4:16
    
also, according to howto on lartc.org, it seems the kernel does need to be recompiled with PF_KEY etc. What is the advantage over strongswan, which claims no need to mod/recompile kernel. –  Alex Oct 27 '11 at 4:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.