Friday, January 21, 2011

Ubuntu Shrew(IKE) Soft VPN client IPsec

SkyHi @ Friday, January 21, 2011
#sudo apt-get install ike

Note:
Most Linux systems will require the following modifications to the System Settings in order to work with the Shrew Soft VPN Client. Wthout the following sysctl setting, the kernel will drop packets received on one interface when the destination address is owned by another interface.

1. Use a text editor to edit (as root) /etc/sysctl.conf
2. Change the following Entries from 1 to 0 (if these values are not defined you will need to add them in order to override the default setting of

net.ipv4.conf.default.rp_filter=0
net.ipv4.conf.all.rp_filter=0

3. Use a text editor to edit (as root) /etc/sysctl.d/10-network-security.conf

4. Change the following Entries from 1 to 0 (if these values are not defined you will need to add them in order to override the default setting of 1).

net.ipv4.conf.default.rp_filter=0
net.ipv4.conf.all.rp_filter=0

5. reboot

6. Execute the following command to confirm settings change has taken affect:
sysctl –a| egrep rp_filter|egrep –v arp
net.ipv4.conf.all.rp_filter = 0
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.lo.rp_filter = 0
net.ipv4.conf.eth0.rp_filter = 0


REFERENCES
ShrewSoftVPN_LinuxInstall.pdf