Category:FireBrick IPsec Road Warrior: Difference between revisions

Category:FireBrick IPsec Road Warrior (view source)

Revision as of 14:45, 31 January 2019

683 bytes added , 31 January 2019

m

no edit summary

AA-Andrew

autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators

12,270

edits

Revision as of 15:46, 30 July 2015 (view source) AA-Andrew (talk \| contribs) mNo edit summary ← Older edit		Revision as of 14:45, 31 January 2019 (view source) AA-Andrew (talk \| contribs) mNo edit summary Newer edit →
(24 intermediate revisions by 2 users not shown)
<indicator name="Tunnels">[[File:Menu-IPsec.svg\|link=:Category:FireBrick IPsec\|30px\|Back up to the FireBrick IPsec Tunnels Category Page]]</indicator> __NOTOC__ The FireBrick manual goes into some detail on configuring IPsec. ~~This~~These ~~page~~pages ~~contains~~below contain specific examples for a simple scenario where you have one or more clients devices - iPhones iPads, Android phones/tablets or Windows machines, and a FireBrick in your home or office, and you would like to VPN (using IPsec) to the FireBrick and have an IP address on your LAN. '''First''' Create certificates: In this example we are assuming you can allocate some IP addresses on you LAN. You do this by picking a range of addresses and setting up a roaming-pool (see below). You need to ensure the IP range does not clash with devices on the LAN and is not in the DHCP ranges that could allocate to the LAN. You also need to set proxy-arp on the LAN interface settings to allow communications to other devices on your LAN. Alternatively you could set private IP addresses in the pool and set the nat setting. You should probably also consider firewalling rules for traffic to/from IPsec connections. ~~First, create certificates and the FireBrick config, then look at the pages for the device you are wanting to configure~~ <div class="AAMenuRow"> {{AAMenu\|img=Menu-Certificate.svg\|link=FireBrick_Road_Warrior_Certificates\|title=Certificates\|text='''First:''' Create the required 'CA' and 'Server' Certificates, weand ~~have~~upload ~~some~~them ~~tools~~to ~~available~~your toFireBrick. ~~make~~Using ~~this~~Let's aEncrypt ~~little~~is ~~easier~~easy}} {{AAMenu\|img=Menu-FireBrick.svg\|link=FireBrick_Road_Warrior_FireBrick_Config\|title=FireBrick config\|text='''Second:''' Configure the FireBrick}}▼ '''Second:''' Create the FireBrick config: ▲{{AAMenu\|img=Menu-FireBrick.svg\|link=FireBrick_Road_Warrior_FireBrick_Config\|title=FireBrick config\|text='''Second:''' Upload the Configure the FireBrick with IKE, EAP Users, and roaming pools of addresses! (easier than it sounds!)}} </div> <div class="AAMenuRow"> {{AAMenu\|img=Menu-Apple.svg\|link=~~FireBrick_Road_Warrior_iPhone_iPad~~FireBrick_Road_Warrior_iPhone_iPad_iOS8\|title=iPhone & iPad iOS8\|text=Creating a VPN profile for Apple iPhones and Apple iPads to connect to your FireBrick}} {{AAMenu\|img=Menu-~~Android~~Apple.svg\|link=~~FireBrick_Road_Warrior_Android~~FireBrick_Road_Warrior_iPhone_iPad_iOS9\|title=~~Android~~iPhone & iPad iOS9\|text=~~Android,~~Creating ega ~~phones~~VPN connection for Apple iPhones and ~~tablets~~Apple iPads running iOS 9 to connect to your FireBrick}} {{AAMenu\|img=Menu-~~Windows~~Apple.svg\|link=~~FireBrick_Road_Warrior_Windows~~FireBrick_Road_Warrior_OSX\|title=~~Windows~~Apple Desktops & Laptops\|text=~~Windows~~Using Strongswan on Apple OS X computers, eg Macbook & Air laptops, iMac, Mini etc to 7connect ~~and~~to ~~Windows~~your 10FireBrick}} ~~{{AAMenu\|img=Menu-Apple.svg\|link=FireBrick_Road_Warrior_OSX\|title=Apple OSX\|text=Apple OSX, eg Macbook laptops etc}}~~ {{AAMenu\|img=Menu-Android.svg\|link=FireBrick_Road_Warrior_Android\|title=Android\|text=Using Strongswan on Android phones and tablets to connect to your FireBrick}} {{AAMenu\|img=Menu-Windows.svg\|link=FireBrick_Road_Warrior_Windows_7\|title=Windows 7\|text=Using the built in VPN features of Windows 7 to connect to your FireBrick}} {{AAMenu\|img=Menu-Windows.svg\|link=FireBrick_Road_Warrior_Windows_10\|title=Windows 10\|text=Using the built in VPN features of Windows 10 to connect to your FireBrick}} {{AAMenu\|img=Menu-swan.svg\|link=FireBrick_Road_Warrior_strongSwan\|title=strongSwan (Debian et al)\|text=Using strongSwan on Debain (or other distros) to connect to your FireBrick}} {{AAMenu\|img=Menu-swan.svg\|link=FireBrick_Road_Warrior_strongSwan_Network_Manager\|title=strongSwan via Network Manager (Fedora)\|text=Using strongSwan via the Network Manager GUI in CentOS/Fedora etc}} </div> [[Category:FireBrick IPsec]]