New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

kernel with ipsec support

Good ideas? Share with us!
6feet5
Posts: 269
Joined: 13 Apr 2007, 17:32
Location: Gnesta, Sweden
Contact:

Re: kernel with ipsec support

Post by 6feet5 »

Hi,

First of all, I'm no expert in these matters, so I accept no responsibility should you brick your unit, OK :-)

You need to apply the patches to the source tree. Easy way out is (make sure your current directory is the "linux-2.6.32.13" one):

Code: Select all

wget http://download.excito.net/kernel/BubbaTwo/2.6.32.13/linux-2.6.32.13-patches.tar.gz
tar xzf linux-2.6.32.13-patches.tar.gz
patch -p1 <epatches/vsc8601_and_clockskewfix.patch
patch -p1 <epatches/ETSEC27-errata-workaround.patch
patch -p1 <epatches/2.6.31-ex1.patch
Now you should be able to do:

Code: Select all

make bubbatwo_defconfig
/Johan
RandomUsername
Posts: 904
Joined: 09 Oct 2009, 18:49

Re: kernel with ipsec support

Post by RandomUsername »

Everything compiles and starts OK on a Bubba Two thanks to the above. Now I just need to get round to configuring it and using it :)
kurt2000
Posts: 40
Joined: 16 Sep 2010, 14:15

Re: kernel with ipsec support

Post by kurt2000 »

to use the hardware acceleration, you should use aes128 as encryption.

To set encryption propossals for phase1/2 you can use :

ike=aes128-sha1-modp1024
esp=aes128-sha1-modp1024

which roughly means aes128 for encryption, sha1 for authentication and dielfe hieman2 for perfect forward secracy.

What is your scenario ? a lan2lan tunnel to a corporate lan or ?

Wkr.
RandomUsername
Posts: 904
Joined: 09 Oct 2009, 18:49

Re: kernel with ipsec support

Post by RandomUsername »

What is your scenario ? a lan2lan tunnel to a corporate lan or ?
Nothing too exciting. I just want to be able to remotely access my network from mobile devices (e.g. Accessing samba shares etc). Just need to find the time to set it up.
kurt2000
Posts: 40
Joined: 16 Sep 2010, 14:15

Re: kernel with ipsec support

Post by kurt2000 »

RandomUsername wrote: Nothing too exciting. I just want to be able to remotely access my network from mobile devices (e.g. Accessing samba shares etc). Just need to find the time to set it up.
Ok, what os is your client runnig ?

--
Svend
RandomUsername
Posts: 904
Joined: 09 Oct 2009, 18:49

Re: kernel with ipsec support

Post by RandomUsername »

It will be mainly my iPad and iPhone. Maybe I'll set it up for access from a laptop running Ubuntu too.

Cheers.
kurt2000
Posts: 40
Joined: 16 Sep 2010, 14:15

Re: kernel with ipsec support

Post by kurt2000 »

RandomUsername wrote:It will be mainly my iPad and iPhone. Maybe I'll set it up for access from a laptop running Ubuntu too.

Cheers.
I've updated the wiki with some extra. ikev1 is working really well. 40 mbit troughput, no problem.

wkr.
Post Reply