Re: RE: IPSEC VPN through Actiontec DPCM
Todd Ignasiak <[email protected]>
| Newsgroups | gmane.linux.uclinux.actiontec |
|---|---|
| Message-ID | <[email protected]> |
I have been using IPSec through an Actiontec modem, and I did not require any special configuration. I am using MacOS 10.3 IPSec connecting out through an Actiontec to a VPN gateway. The IPSec works fine through the NAT. Inbound access to a VPN gateway behing an Actiontec would be a bit more challenging. It would just require you to add some forwarding rules to pass the IPSec to the internal gateway. You would need to forward UDP port 500 - for the IKE communications, and IP Protocols 20 and 21 (those are IP protocol numbers, not TCP/UDP port numbers) for AH and ESP tunnels. On Tue, 11 May 2004 11:38:11 -0500, Jim Burdick <[email protected]> wrote: > > All, > > A partner and I had searched high and low for how to run a VPN through an > Actiontec. We tried ideas from this list and other sources and ultimately > were unable to get any of those ideas work. > > We DID, however get ipsec vpn to work through the modem! I am not sure how > much of the following is absolutely required and how much is just "we don't > want to mess with what works." > > 1. we use the Actiontec DualPCModem and a DLINK DI-804HV to vpn back to our > main server. Plug Dlink WAN into an Actiontec ethernet port and !Do Not Use > The Other Actiontec E-net Port! > > 2. turn DHCP off on the Actiontec, assign the Dlink WAN port static IP > 192.168.0.2 & gateway 192.168.0.1 > > 3. we hook our laptops to the DHCP behind the Dlink 10.0.1.0 > > 4. define vpn from Dlink to home office > > 5. browse from 10.0.1.x to 192.168.0.1 -> status -> connect ----DONE! > > This has worked solidly for us, but we can make it stop working immediately > by using the 2nd ethernet port on the Actiontec. If this happens, power down > and reboot both the Actiontec and the Dlink. > > Best Regards, > > Jim Burdick > Compass Consulting Group > email: [email protected] > > __ > ActionHack Mailing List - ActionHack-W7/[email protected] > http://www.express.org/mailman/listinfo/actionhack > http://www.embeddedlinuxinterfacing.com/wiki.php/ActiontecDualModem > __ ActionHack Mailing List - ActionHack-W7/[email protected] http://www.express.org/mailman/listinfo/actionhack http://www.embeddedlinuxinterfacing.com/wiki.php/ActiontecDualModem