Re: Cipe on 2.6.16.15

I did use cipe quite a long time too, but due to the missing working 
windows client I had to switch to openvpn.
You will be surprised how easy the setup is if you start with a fixed 
key and tun (or on windows as server tap) device as start.
OpenVPN supports stronger encryption and has yet no "by design" security 
problem like cipe has, and has less problems with lossy connections.
http://openvpn.net/
static key mini howto
http://openvpn.net/static.html

A "complete and working" serverconfig for "tun" with 192.168.52.24 as 
transfer net (a must for window clients) connecting 192.168.0.* with 
192.168.1.*

dev tun01
ifconfig 192.168.52.25 192.168.52.26
route-gateway 192.168.52.26
route 192.168.52.24 255.255.255.252
route 192.168.1.0 255.255.255.0
secret /etc/openvpn/static01.key
; compression
comp-lzo
; Hold tunnel with more strength
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
; when run as daemon drop rights
user nobody
group nobody
daemon

The client config (linux or windows - doesn't matter, same config, just 
the key location changes):

remote -ip-of-remote-or-some-dyndns-name
dev tun01
ifconfig 192.168.52.26 192.168.52.25
route-gateway 192.168.252.25
route 192.168.52.25 255.255.255.252
route 192.168.0.0 255.255.255.0
secret /etc/openvpn/static01.key
; compression
comp-lzo
; Hold tunnel with more strength
keepalive 10 60
ping-timer-rem
persist-tun  
persist-key

That is all!
BTW: Quite some code of cipe for Windows made it's way into the openvpn 
win32 tunnel driver.
Cipe was the first good simple-config-quite-secure-tunnel program, but 
openvpn is now superior in many ways.

Jou

Beat Rubischon schrieb:
> Hello!
>
> Today I tried to upgrade a Debian Sarge based cipe concentrator from 2.6.8
> to 2.6.16.15 and got several failures while compiling cipe. There are some
> changes in the CVS and patches on sourforge, but none of them helped.
>   
 > I understand some C, but fixing those bugs will be more then I'm able 
to do
> ;-)
>
> Are there any plans to continue working on cipe? Should I invest time in
> debugging or should I switch to a differten VPN protocol?
>
> Beat
>   


--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>