Install LibreSWAN and Xl2tpd - Revision history

Bob: /* System Prep */

2015-11-23T19:52:47Z

System Prep

← Older revision		Revision as of 19:52, 23 November 2015
Line 1:		Line 1:
	==System Prep==		==System Prep==
	*apt-get install libnss3-dev libnspr4-dev pkg-config libpam-dev libcap-ng-dev libcap-ng-utils libselinux-dev libcurl4-nss-dev libgmp3-dev flex bison gcc make libunbound-dev libpcap-dev libnss3-tools ppp libradius1		*apt-get install libnss3-dev libnspr4-dev pkg-config libpam-dev libcap-ng-dev libcap-ng-utils libselinux-dev libcurl4-nss-dev libgmp3-dev flex bison gcc make libunbound-dev libpcap-dev libnss3-tools ppp libevent-dev libradius1
			*apt-get install --no-install-recommends xmlto
	*echo "net.ipv4.conf.all.accept_redirects = 0" >> /etc/sysctl.conf		*echo "net.ipv4.conf.all.accept_redirects = 0" >> /etc/sysctl.conf
	*echo "net.ipv4.conf.all.send_redirects = 0" >> /etc/sysctl.conf		*echo "net.ipv4.conf.all.send_redirects = 0" >> /etc/sysctl.conf

2015-09-21T23:59:02Z

Configure Libreswan

← Older revision		Revision as of 23:59, 21 September 2015
Line 26:		Line 26:

	==Configure Libreswan==		==Configure Libreswan==
			*<b>BIG FAT NOTE:</b>certificate handling changed. see: https://libreswan.org/wiki/3.14_X509
	*scp -r root@192.168.26.10:/var/CA/computerisms.com/porchlian.computerisms.com/porchlian.computerisms.com.p12 root@192.168.26.10:/var/CA/computerisms.com/CA/Computerisms.Certificate.Authority.p12 root@192.168.26.10:/var/CA/computerisms.com/Computerisms.Certificate.Authority.crl ~		*scp -r root@192.168.26.10:/var/CA/computerisms.com/porchlian.computerisms.com/porchlian.computerisms.com.p12 root@192.168.26.10:/var/CA/computerisms.com/CA/Computerisms.Certificate.Authority.p12 root@192.168.26.10:/var/CA/computerisms.com/Computerisms.Certificate.Authority.crl ~
	*certutil -N -d /etc/ipsec.d		*certutil -N -d /etc/ipsec.d

2014-12-24T01:13:45Z

Start IPSec and Xl2tpd

← Older revision		Revision as of 01:13, 24 December 2014
Line 51:		Line 51:
	==Start IPSec and Xl2tpd==		==Start IPSec and Xl2tpd==
	*ipsec setup start; tail -f /var/log/auth.log <b><= Check for errors</b>		*ipsec setup start; tail -f /var/log/auth.log <b><= Check for errors</b>
	*xl2tpd -C /etc/xl2tpd/l2tp-control		*xl2tpd -c /etc/xl2tpd/xl2tpd.conf -C /etc/xl2tpd/l2tp-control
	*systemctl enable ipsec		*systemctl enable ipsec

2014-11-20T21:40:33Z

Configure Xl2tpd

← Older revision		Revision as of 21:40, 20 November 2014
Line 41:		Line 41:
	*vi [[/etc/xl2tpd/xl2tpd.conf]]		*vi [[/etc/xl2tpd/xl2tpd.conf]]
	*vi [[/etc/xl2tpd/ppp-options.xl2tpd]]		*vi [[/etc/xl2tpd/ppp-options.xl2tpd]]
			*touch /etc/xl2tpd/xl2tpd.control

	==Configure RadiusClient==		==Configure RadiusClient==

2014-11-19T23:15:40Z

Obtain and Install Libreswan

← Older revision		Revision as of 23:15, 19 November 2014
Line 10:		Line 10:
	*<b>Find latest downloads here: </b>http://libreswan.org/		*<b>Find latest downloads here: </b>http://libreswan.org/
	*cd /usr/src		*cd /usr/src
	*wget https://download.libreswan.org/libreswan-3.11.tar.gz		*wget https://download.libreswan.org/libreswan-3.12.tar.gz
	*tar zxf libreswan-3.11.tar.gz		*tar zxf libreswan-3.12.tar.gz
	*cd libreswan-3.11/		*cd libreswan-3.12/
	*make programs		*make programs
	*make install		*make install

2014-10-29T20:04:04Z

Obtain and Install Libreswan

← Older revision		Revision as of 20:04, 29 October 2014
Line 10:		Line 10:
	*<b>Find latest downloads here: </b>http://libreswan.org/		*<b>Find latest downloads here: </b>http://libreswan.org/
	*cd /usr/src		*cd /usr/src
	*wget https://download.libreswan.org/libreswan-3.9.tar.gz		*wget https://download.libreswan.org/libreswan-3.11.tar.gz
	*tar zxf libreswan-3.9.tar.gz		*tar zxf libreswan-3.11.tar.gz
	*cd libreswan-3.9/		*cd libreswan-3.11/
	*make programs		*make programs
	*make install		*make install

2014-08-31T02:07:12Z

Start IPSec and Xl2tpd

← Older revision		Revision as of 02:07, 31 August 2014
Line 49:		Line 49:

	==Start IPSec and Xl2tpd==		==Start IPSec and Xl2tpd==
	*ipsec setup ~~restart~~; tail -f /var/log/auth.log <b><= Check for errors</b>		*ipsec setup start; tail -f /var/log/auth.log <b><= Check for errors</b>
	*xl2tpd -C /etc/xl2tpd/l2tp-control		*xl2tpd -C /etc/xl2tpd/l2tp-control
			*systemctl enable ipsec

	==Finalize netup.sh script==		==Finalize netup.sh script==

2014-08-30T23:36:37Z

Obtain and Install Libreswan

← Older revision		Revision as of 23:36, 30 August 2014
Line 10:		Line 10:
	*<b>Find latest downloads here: </b>http://libreswan.org/		*<b>Find latest downloads here: </b>http://libreswan.org/
	*cd /usr/src		*cd /usr/src
	*wget https://download.libreswan.org/libreswan-3.8.tar.gz		*wget https://download.libreswan.org/libreswan-3.9.tar.gz
	*tar zxf libreswan-3.8.tar.gz		*tar zxf libreswan-3.9.tar.gz
	*cd libreswan-3.8/		*cd libreswan-3.9/
	*make programs		*make programs
	*make install		*make install

2014-05-14T03:59:47Z

Configure Libreswan

← Older revision		Revision as of 03:59, 14 May 2014
Line 35:		Line 35:
	*vi [[/etc/ipsec.secrets]]		*vi [[/etc/ipsec.secrets]]
	*vi [[/etc/ipsec.d/nsspassword]]		*vi [[/etc/ipsec.d/nsspassword]]
	*crlutil -I -i /root/Computerisms.Certificate.Authority.crl.der -d /etc/ipsec.d/
	*cp /root/Computerisms.Certificate.Authority.crl /etc/ipsec.d/crls/		*cp /root/Computerisms.Certificate.Authority.crl /etc/ipsec.d/crls/

2014-05-14T03:45:04Z

Configure Libreswan

← Older revision		Revision as of 03:45, 14 May 2014
Line 36:		Line 36:
	*vi [[/etc/ipsec.d/nsspassword]]		*vi [[/etc/ipsec.d/nsspassword]]
	*crlutil -I -i /root/Computerisms.Certificate.Authority.crl.der -d /etc/ipsec.d/		*crlutil -I -i /root/Computerisms.Certificate.Authority.crl.der -d /etc/ipsec.d/
			*cp /root/Computerisms.Certificate.Authority.crl /etc/ipsec.d/crls/

	==Configure Xl2tpd==		==Configure Xl2tpd==