Installing personalVPN-IPsec on Ubuntu Linux

From Witopiawiki

Jump to: navigation, search

personalVPN-IPSEC is possible on linux via the program called Shrew which you can install at anytime via the source packages from their website. The following directions are for installation using the Ubuntu Software Center available in ALL versions of Ubuntu.

Contents

Setup

Installing The Software

  1. Open Software Center (standard Ubuntu click on Applications -> Bottom of Menu)
    file:Ubuntu_Software_Center_Menu_Item.png
  2. Now search for shrew by typing that in the search in the upper right corner
    file:USC_Shrew_Install.png
  3. Click on Install
    You will need to enter your root password when asked




Setting Up the IPSEC Connection

  1. Open Shrew Soft VPN Manager
    file:Shrew_menu.png
  2. Click on add in the new window
    file:Shrew_no_config.png
  3. Under the General tab enter the Host Name
    file:Shre_linux_hostname.png

    VERY IMPORTANT CLICK HERE FOR OPTIONS
  4. Click the dropdown for Authentication Method and choose Mutal PSK + XAuth
  5. Click on the credential (sub tab on the authentication tab)
  6. Enter the Pre Shared Key of witopia (all lowercase)
    file:Shrew-linux-authentication.png
  7. Click the right arrow again to Phase 1 tab (click on tab)
  8. For DH Exchange set the dropdown to group 2
    file:Shrew-linux-phase1.png
  9. Click Save




Connecting & Disconnecting

Connecting

  1. Open Shrew Soft VPN Manager
    file:Shrew_menu.png
  2. Click on the name of the location you want to connect to.
    file:Shrew_config_present.png
  3. Click connect
  4. Enter your PPPT/IPSEC username and password when prompted
    file:Shrew_username_password.png

  5. You are now connected to your personalVPN-IPSEC
    file:Shrew-linux-connected.png
    • NOTE: DO NOT CLOSE THIS WINDOW OR THE VPN WILL DISCONNECT

Disconnecting

  1. To disconnect the IPSEC-VPN just click on the Disconnect button



Troubleshooting

If you are able to connect, but you cannot actually pass any traffic, you need to modify your system to allow the IPSec traffic.

  1. Open Terminal
  2. Type "sudo nano /etc/sysctl.d/10-network-security.conf" (no quotes)
  3. Change =1 to =0 so it looks like this:
    net.ipv4.conf.default.rp_filter=0
    net.ipv4.conf.all.rp_filter=0
  4. Save and restart the computer
Personal tools