[strongSwan] L2TP and PPTP IPsec virtual dial up pool with mpd5

2020-06-15 Thread The Doctor
Question, has anyone set up a IPSec "Virual Dial up pool" for PPTP/L2TP using strongswan? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! nk.ca started 1 June 1995 .

[strongSwan] AUTH_FAILED

2020-06-15 Thread wessel
Hi, I'm new to Strongswan. I have a VPN that the default Windows client can connect to with EAP-MSCHAP v2. I am trying to get it to work from Linux. When connecting with swanctl -I, the server doesn't proceed after initial contact: [ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT)

Re: [strongSwan] [strongswan] davici: Fix codesonar warnings

2020-06-15 Thread Martin Willi
Hi, > Fixed below codesonar warning. > isprint() is invoked here with an argument of signed type char, but > only has defined behavior for int arguments that are either > representable as unsigned char or equal to the value of macro EOF(- > 1). > > To avoid this unexpected behaviour, typecasted

Re: [strongSwan] [strongswan] davici: Fix codesonar warnings

2020-06-15 Thread Tobias Brunner
Hi Saloni, In case Martin doesn't pick it up from here and for future patches, please file a pull request at [1]. Regards, Tobias [1] https://github.com/strongswan/davici/pulls

[strongSwan] [strongswan] davici: Fix codesonar warnings

2020-06-15 Thread Saloni Jain
Hello, Posting this on behalf of "Amitanand Chikorde " From: "Amitanand.Chikorde" Fixed below codesonar warning. isprint() is invoked here with an argument of signed type char, but only has defined behavior for int arguments that are either representable as unsigned char or equal to the value

Re: [strongSwan] access roadwarriors from server's LAN - how?

2020-06-15 Thread Volodymyr Litovka
Hi, to get rid of ipsec0 interface, you need to set "load = no" to kernel-libipsec.conf plugin on Ubuntu 18.04 (it's pretty old and do not support xfrm), I'm using the following configuration of VTI (this is netplan's config, by I guess you can easily map it to another formats): "network":

Re: [strongSwan] access roadwarriors from server's LAN - how?

2020-06-15 Thread lejeczek
On 15/06/2020 10:29, Volodymyr Litovka wrote: > > Hi, > > may be it makes sense to consider different interfaces? > One for public access, another one - for LAN access. > > Take a look into > https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN > > You can use VTI configuration

Re: [strongSwan] access roadwarriors from server's LAN - how?

2020-06-15 Thread Volodymyr Litovka
Hi, may be it makes sense to consider different interfaces? One for public access, another one - for LAN access. Take a look into https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN You can use VTI configuration for LAN purposes, while having separate interface (with

Re: [strongSwan] access roadwarriors from server's LAN - how?

2020-06-15 Thread lejeczek
On 15/06/2020 08:53, lejeczek wrote: > > On 15/06/2020 07:16, Volodymyr Litovka wrote: >> Hi L., >> >> if you can ping server from client, then, in general, you >> can ping everything from everywhere. >> >> It is a question of routing and firewalls, e.g. >> >> - NodeA@LAN should know, that

Re: [strongSwan] access roadwarriors from server's LAN - how?

2020-06-15 Thread lejeczek
On 15/06/2020 07:16, Volodymyr Litovka wrote: > > Hi L., > > if you can ping server from client, then, in general, you > can ping everything from everywhere. > > It is a question of routing and firewalls, e.g. > > - NodeA@LAN should know, that ClientA@VPN resides behind > VPNSrv@LAN > > -

Re: [strongSwan] access roadwarriors from server's LAN - how?

2020-06-15 Thread Volodymyr Litovka
Hi L., if you can ping server from client, then, in general, you can ping everything from everywhere. It is a question of routing and firewalls, e.g. - NodeA@LAN should know, that ClientA@VPN resides behind VPNSrv@LAN - ClientA@VPN should allow access to his services from VPN connection On