Re: net-to-net vpn

Il 01/06/15 21:17, [email protected] ha scritto:
> Regarding IPCop2 manual section 2.7.1.1:
> 
> Is IPCop2 ever going to offer net-to-net VPN (manual section 2.7.4.4) via
> OPENVPN rather than via IPSEC (manual section 2.7.3.3)?

Another point: openvpn net2net can also connect if both ipcops are
NATed; i know and i've tried IPSEC NAT traversal, but it was a no go for me.
This was a showstopper for me for upgrading to 2.x, so i digged a bit on it.

ZERINA was the old implementatin of openvpn for ipcop 1.4 and two
packages exists: the stable one (0.9.5b) only supported roadwarriors,
while the "beta" (0.9.7a14) also supported lan2lan; the ipcop
implementation seems based on the stable one, with some code refactoring
to better integrate in ipcop's certificate management and a rework of
the openvnctrl binary used to start/stop the services.

I had half an idea of trying to backport (foreport?) the changes from
the old lan2lan zerina to ipcop2, but i gave up because:
 * i'm not a perl guy :(
 * the package should overwrite some scripts bundled with ipcop, so it
could fail hard at the next ipcop update.

By now as a workaround i'm using a custom init script that runs:
 * /usr/sbin/openvpn --config lan2lan.conf
 * some firewall rules to enable traffic flow to the lan2lan.

This workaround is suboptimal, too, since you don't have a GUI to
configure settings or bring the tunnel up/down.

If someone wants to pick up the job of enabling lan2lan on ipcop2, i'll
be glad of helping.

Fabio



------------------------------------------------------------------------------
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user