On Fri, 2008-01-04 at 09:49 -0800, Mr.Scrooge wrote: > --- tony.chamberlain@xxxxxxxxx wrote: > > > > > > > Has anyone had experience with Freeswan? > > > > We have a situation where say there is a Linux machine in City 1 with IP address 10.0.0.10 (for > > example) > > and a Linux machine in City 2 with an IP address of 10.0.0.20 (for example). Now these machines > > are > > in different cities, so machine 1 cannot just open a socket on 10.0.0.20 because machine 2 is on > > a different > > network. Each machine does have a router, say City 1 is 65.15.47.28 (for example). To get into > > City 1from > > outside the network you go through thr router, use 65.15.47.28 which routes into the LAN. The > > same for > > City 2. For a unix process on 10.0.0.10 to send to 10.0.0.20 it would have to send to > > 65.15.47.28 which would route > > it in. Problem is, its from address would be 10.0.0.10, which the machine at 10.0.0.20 wouldn't > > know about. > > A process on 10.0.0.20 would have to do something similar to respond. > > > > Now these machines have to actually be able to use each others' 10.0.0.X addresses. I assume > > this is possible > > via a VPN. They don't have any Cicsco VPNs or anything, and they asked whether it is possible > > just using > > Linux (CentOS) to set up a VPN. I did a bit of searching and found a couple things. Freeswan > > seemed to be > > the most promising, though other packages could be just as good. > > > > Is the above scenario possible with Freeswan or can you recommend some other way? > > > > > > Thanks > > > Wouldn't port fowarding work here? > > -Max > > > ____________________________________________________________________________________ > Never miss a thing. Make Yahoo your home page. > http://www.yahoo.com/r/hs > Maybe already mentioned by others: OpenVPN could help. http://openvpn.net/ Calin ================================================= My face is new, my license is expired, and I'm under a doctor's care!!!!
