I do some volunteer work for a local non-profit and we have a need to put a
VPN in place for those who travel. I've been looking at PPTP, OpenVPN and
IPSEC and decided to try IPSEC. After reading the various man pages and
Google I came across www.allard.nu and decided to try his Greenbow method.
So far I've not had any success getting it to work. I suspect I'm missing
something but not sure where to look or where to start. Could someone who
has configured something similar look over these configs and point me in the
right direction? My goal is to tunnel all their traffic through us (web,
etc) and allow access to the internal LAN.

/etc/ipsec.conf
ike dynamic from any to any \
main auth  hmac-sha1 enc aes group modp1024 \
quick auth hmac-sha1 enc aes psk abc123

/etc/pf.conf
pass in proto esp from any to $ext_ip
pass in proto udp from any port = 500 to $ext_ip port = 500 keep state
pass in on enc0 all

Reply via email to