kernel with ipsec support

[6feet5]

Hi,

First of all, I'm no expert in these matters, so I accept no responsibility should you brick your unit, OK

You need to apply the patches to the source tree. Easy way out is (make sure your current directory is the "linux-2.6.32.13" one):

Code: Select all

wget http://download.excito.net/kernel/BubbaTwo/2.6.32.13/linux-2.6.32.13-patches.tar.gz
tar xzf linux-2.6.32.13-patches.tar.gz
patch -p1 <epatches/vsc8601_and_clockskewfix.patch
patch -p1 <epatches/ETSEC27-errata-workaround.patch
patch -p1 <epatches/2.6.31-ex1.patch

Now you should be able to do:

Code: Select all

make bubbatwo_defconfig

/Johan

[RandomUsername]

Everything compiles and starts OK on a Bubba Two thanks to the above. Now I just need to get round to configuring it and using it

[kurt2000]

to use the hardware acceleration, you should use aes128 as encryption.

To set encryption propossals for phase1/2 you can use :

ike=aes128-sha1-modp1024
esp=aes128-sha1-modp1024

which roughly means aes128 for encryption, sha1 for authentication and dielfe hieman2 for perfect forward secracy.

What is your scenario ? a lan2lan tunnel to a corporate lan or ?

Wkr.

[RandomUsername]

What is your scenario ? a lan2lan tunnel to a corporate lan or ?

Nothing too exciting. I just want to be able to remotely access my network from mobile devices (e.g. Accessing samba shares etc). Just need to find the time to set it up.

[kurt2000]

Nothing too exciting. I just want to be able to remotely access my network from mobile devices (e.g. Accessing samba shares etc). Just need to find the time to set it up.

Ok, what os is your client runnig ?

--
Svend

[RandomUsername]

It will be mainly my iPad and iPhone. Maybe I'll set it up for access from a laptop running Ubuntu too.

Cheers.

[kurt2000]

It will be mainly my iPad and iPhone. Maybe I'll set it up for access from a laptop running Ubuntu too.

Cheers.

I've updated the wiki with some extra. ikev1 is working really well. 40 mbit troughput, no problem.

wkr.