Darrell, Your RPM installed very nicely on my SME5 (dual proc PII 300 with software raid SCSI). It generated the keys and advised them where required.
I tried to set up a link between it and my SnapGear Lite+ at home. The home connection is ADSL with dynamic address provided by pppoe. At present our ADSL is fairly stable, and for the last week I have had the one IP address as neither I nor Telstra (our local provider who HAS had lots of trouble) have needed to reset the connection. So I set up the SME as though my pppoe connection was a fixed IP. The setup on both the SME and my SnapGear went OK, but the SnapGear asks for an Authentication Identifier. I put in main@work for the SME (bad move, it should have been @[external IP addr] of SME.) I'm wondering as I get further into this whether the SME will require @[external IP addr] of my connection to be my Authentication Identifier? I'll let you know after more testing. Can I comment that there should be some additional fields in the VPN setup pages: ** probably the most important is "number of negotiation attempts:" SnapGear sets this to 3 by default, but SME sets it to "never give up". In my case now that my SME server is trying to set up an IPSec VPN with me, I can no longer ping or gain ssh access to that server via the external IP. So I will actually need to go physically into the office to get access to turn off IPSec from the internal IF **many "other ends" require an "Authentication Identifier", which can be pretty much anything including an "@" in the string (preferably not one of the computer user's email address), but in the case of SME5 it is @[external IP addr] by default. It would be nice to report the Authentication Identifier on the same page as the public key. It would also be nice to be able to set your own Authentication Identifier. That's all so far, more when I get to play around with it at work tomorrow. Hugh -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
