RedHat EL3 和 EL4 配置VPN连接

niq_leon

这好像只针对源码包，但是对于rpm包应该怎么办？
[root@localhost ~]# rpm -ivh ipsec-tools-0.3.3-2.1.i386.rpm
Preparing...                ########################################### [100%]
   1:ipsec-tools            ########################################### [100%]
[root@localhost ~]# rpm -qa |grep ipsec-tools
ipsec-tools-0.3.3-2.1
[root@localhost ~]# rpm -ql ipsec-tools-0.3.3-2.1
/etc/racoon
/etc/racoon/certs
/etc/racoon/psk.txt
/etc/racoon/racoon.conf
/sbin/setkey
/usr/sbin/racoon
/usr/sbin/racoonctl
/usr/share/doc/ipsec-tools-0.3.3
/usr/share/doc/ipsec-tools-0.3.3/ChangeLog
/usr/share/doc/ipsec-tools-0.3.3/FAQ
/usr/share/doc/ipsec-tools-0.3.3/NEWS
/usr/share/doc/ipsec-tools-0.3.3/README
/usr/share/doc/ipsec-tools-0.3.3/psk.txt
/usr/share/doc/ipsec-tools-0.3.3/racoon.conf
/usr/share/man/man5/racoon.conf.5.gz
/usr/share/man/man8/racoon.8.gz
/usr/share/man/man8/setkey.8.gz

niq_leon

我用tcpdump的时候有这些数据
00:49:16.985903 IP 10.140.40.160.isakmp > 10.140.50.19.isakmp: isakmp: phase 1 I agg
其中的isakmp是不是代表数据已经加密了呢？？为什么没有你前面的DSP阿？？

niq_leon

[root@niq-2 network-scripts]# tail /var/log/messages
May 30 05:40:51 niq-2 racoon: INFO: fe80::20c:29ff:fe20:26c0%eth2[500] used as isakmp port (fd=9)
May 30 05:40:51 niq-2 racoon: INFO: fe80::20c:29ff:fe20:26ac%eth0[500] used as isakmp port (fd=10)
May 30 05:40:51 niq-2 racoon: INFO: ::1[500] used as isakmp port (fd=11)
May 30 05:40:51 niq-2 racoon: INFO: 192.168.96.2[500] used as isakmp port (fd=12)
May 30 05:40:51 niq-2 racoon: INFO: 10.140.40.160[500] used as isakmp port (fd=13)
May 30 05:40:51 niq-2 racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=14)
May 30 05:40:58 niq-2 racoon: INFO: IPsec-SA request for 10.140.50.19 queued due to no phase1 found.
May 30 05:40:58 niq-2 racoon: INFO: initiate new phase 1 negotiation: 10.140.40.160[500]<=>10.140.50.19[500]
May 30 05:40:58 niq-2 racoon: INFO: begin Aggressive mode.
May 30 05:41:08 niq-2 racoon: ERROR: phase1 negotiation failed due to time up. 546e871d140ac24f:0000000000000000

niq_leon

OK！自己动手，丰衣足食！

captail

慕名前来,学习中

kevin.tan

请教一下，在配　ipsec　VPN时对端的public地址能否用动态域名么？（BTW，没有固定IP，想用adsl架设一下）

jack198591

请教一下/etc/racoon/racoon.conf 里的配置信息是自己写的吗??
有没有什么语法规范

shhgs

想请kissingwolf给我们介绍一下OpenVPN和OpenSwan以及这个RHEL官方的VPN各有什么优劣？

此外，还想请教一下ssl VPN 和 IPsec VPN 各有什么优劣。应该如何取舍。

谢谢！