Re: Laptop to OpenBSD firewall VPN

This isn't exactly applicable to ipv6 unless you're using IPv6 transport
throughout.

You will find that setting default route over IPv6 has an unexpected side
effect.. all ndp multicast messages (kernel generated) end up going over
the IPsec tunnel instead of the link-layer at the local interface.

That being said, presuming you're doing v4 IPsec you simply want to setup
a default route ipsec tunnel .. like this:

   http://FreeDaemonConsulting.com/tech/SecureArchitectures/tt/isakmpd.conf

It should be trivial to change v6 to v4 in that example.

WRT roaming, you'll have to use something other than the IP address as I have,
but that part should be inherently obvious.

Good luck!
-- 
Todd Fries .. [email protected]


Free Daemon Consulting, LLC                    VOIP: 1.636.410.0632
http://FreeDaemonConsulting.com                Land: 1.405.810.2918
"..in support of free software solutions."   Mobile: 1.405.203.6124

Key fingerprint: 37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
            Key: http://todd.fries.net/pgp.txt

Penned by Bernard Golden on Fri, Jan 02, 2004 at 02:06:44PM -0800, we have:
| I have been tasked with setting up a VPN arrangement to enable our user
| population to contact our servers from their laptops at home. I have
| reviewed the vpn man pages as well as the VPN overview that's available and
| think I understand them. However, it seems like they describe a setup to
| link two networks across the Internet in a static arrangement. We envision a
| dynamic arrangement with, I assume, some kind of client software to be run
| on the laptops that will contact the firewall and set up a secure VPN link.
| 
| None of the doco seems to apply to our situation. Can anyone point me toward
| some info on how to set this kind of thing up? It seems like there should be
| some online doco or a book that describes this, but I haven't been able to
| find one.
| 
| TIA.
| 
| Bernard Golden