Nomad HowTo

Nomad Network Documentation

How do I get IPSec working on Linux?

Linux IPSec HowTo contributed by Ari Pollak

Debian instructions:
1. apt-get install kernel-source-2.4.[whatever] kernel-package freeswan kernel-patch-freeswan Note: Make sure to create the ipsec devices when prompted.
2. If using kernel-package, add "patch_the_kernel := YES" to /etc/kernel-pkg.conf, and build a new kernel with all freeswan options enabled or as modules.
3. Edit /etc/ipsec.conf, add the following lines:
```
conn bluesocket
    left=10.0.0.1
    leftsubnet=0/0
    right=%defaultroute
    authby=secret
    pfs=no
    auto=start
```
4. Edit /etc/ipsec.secrets, add the following line:
```
: PSK "password"
```
5. Execute the command: update-rc.d -f ipsec remove
6. After the network is configured, run the following command:
```
/etc/init.d/ipsec start
```
7. Before bringing down the network interface, run:
```
/etc/init.d/ipsec stop
```
8. To login to the network, you must go to "nomad" in the URL field of a web browser - going to any other web page will not work until you log in. Be sure to select "IPSec Only" as the authentication server.
RedHat Changes:
1. Get RPMs for your kernel at http://www.freeswan.ca/code/binaries/RedHat-RPMs/ or from source at http://www.freeswan.org.
2. Use "chkconfig --del ipsec" instead of step 5

Hint: If you are using dhclient or dhcpcd and the connection times out after a few minutes, try removing that package and installing pump instead.