There was some discussion about this in the IRC and via PM, Aviator was going to try to resubmit but I am not sure what happened there.  I have the device inst.alled but not integrated into LMCE

Sounds a little Beta?

So is can you direct people to the correct installation instructions location?

[v]

interesting to see:

Code:

virtual_private=%4:192.168.80.0/24

in /etc/ipsec.conf, I was expecting a %v4

is this correct or is this after you have rebooted?  I believe they revert back after reboot based on the files being written from the templates. (it is these we will have to change in the end)

I will configure as per yours tonight and check

Code:

authby=PSK

doesn't work and 'secret' should point the system to the shared secret so should work.

not sure where I have gone wrong robwoodward75 can you post your setup so we can fix this with a ticket?

Code:

Nov  2 20:38:31 dcerouter pluto[30482]: ERROR "/etc/ipsec.secrets" line 11: index "%defaultroute" illegal (non-DNS-name) character in name

I get that also, I changed this to %any and 192.168.80.1 with no success (but no errors).

There is still something wrong.  I do get another error message refering to RSASIG no being authorised and wonder if

Code:

authby=PSK

perhaps, instead of

Code:

authby=secret

in ipsec.conf

I am totally guessing and will play with this once I have re-installed

I like this in its own right - good job.

like Possy said though it would be nice in the orbiter or at the very least added to webadmin.

one thing I would like to see is the CPU temp of all MD's/Core (if it isn't already there)

Can you check that the ticket matches the changes you have made?:

http://svn.linuxmce.org/trac.cgi/ticket/1598#comment:2

I updated the ticket

Will do, but it will be a work in progress - nobody has it working yet

Ticket Created:

http://svn.linuxmce.org/trac.cgi/ticket/1598

So far we do not have a complete solution to submit with the ticket but it is Open and references the two threads on this subject.

pw44,

is yours working now then?

where do you add those iptable rules?

I tried this with the Firewall disabled and still cannot get in

We sell the one listed as FAVI.  I have a couple around the house.  I like them but will check tonight which buttons work and which don't out of the box with LinuxMCE. 

L3mce - PM me your address and I will send you a new one - after all your help, it is the least I can do.

Lat night I tried to get the system to work as describe in the link:
http://blog.riobard.com/2010/04/30/l2tp-over-ipsec-ubuntu

Most of the config files in LMCE are identical to the ones in the Blog.

/etc/ipsec.secrets is slightly different:

LMCE

Code:

%any %any:  PSK "YourSharedSecret"

the Blog

Code:

YOUR.SERVER.IP.ADDRESS   %any:  PSK "YourSharedSecret"

LMCE /etc/xl2tpd/xl2tpd.conf has an extra line:

Code:

name = LinuxMCE_VPN_Server

Code:

sudo ipsec verify

gave me a bunch of failures, these were resolved by running:

Code:

for each in /proc/sys/net/ipv4/conf/*
do
    echo 0 > $each/accept_redirects
    echo 0 > $each/send_redirects
done

I was looking to see if there were any tickets associated with the VPN and found that there was a change that Foxi352 did that should have addressed this:
http://svn.linuxmce.org/trac.cgi/changeset/24656

at the end of all this I still do not have a working VPN

I think I can confirm the same. See:

http://forum.linuxmce.org/index.php/topic,12889.msg92967.html#msg92967