[linux] Wifi IPSec brana a maskarada

[Jan Chrastina]

Zdravim,

snazim sa vytvorit wifi siet zabezpecenu pomocou IPSec. Na dvoch strojoch
bezi racoon nastaveny na Preshared secret. Stroje sa vidia cez IPSec tunel,
spojenie z klienta na branu a opacne funguje dobre. Problem je ze spojenie
klient - svet nefunguje. Wifi brana (172.18.0.1) ma jadro 2.6.11,
/etc/ipsec.conf vyzera takto:

# Flush the SAD and SPD
flush;
spdflush;
spdadd 172.18.10.1/32 0.0.0.0/0 any -P in ipsec
esp/tunnel/172.18.10.1-172.18.0.1/require;
spdadd 0.0.0.0/0 172.18.10.1/32 any -P out ipsec
esp/tunnel/172.18.0.1-172.18.10.1/require;

Na pokusnom klientovi 172.18.10.1 vyzera /etc/ipsec.conf takto:
# Flush the SAD and SPD
flush;
spdflush;
spdadd 0.0.0.0/0 172.18.10.1/32 any -P in ipsec
esp/tunnel/172.18.0.1-172.18.10.1/require;
spdadd 172.18.10.1/32 0.0.0.0/0 any -P out ipsec
esp/tunnel/172.18.10.1-172.18.0.1/require;

Nastavenie maskarady na brane:
root na salas:~# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  172.18.0.0/16        anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Neviete nakopnut ako prinutit branu aby po rozsifrovani poslala paket
normalne cez iptables?
Vdaka za kazdu radu.
Jano


--- reklama -----------------------------------------------------
Televízny program na každý deň
http://tv.zoznam.sk