Koozali.org: home of the SME Server

Site to Site VPN SME 7.5.1

Offline aberlake

  • 7
  • +0/-0
Site to Site VPN SME 7.5.1
« on: February 12, 2012, 02:31:56 PM »
Hi,

I'd like to be able to create a site to site VPN using two SME 7.5.1 boxes. Managed this many years ago using Free S-WAN on SME 6.x! I've tried following instructions for SME 7.1 / 7.3 on the Wiki Howtoe here: http://wiki.contribs.org/Ipsec however there appears to be an issue with the replacement ifup-ipsec scripts. When I try to bring up ipsec0 I get multiple errors:

RTNETLINK answers: File exists
mktemp: cannot create temp file /etc/racoon/psk.uH6201: No such file or directory
/etc/sysconfig/network-scripts/ifup-ipsec: line 227: $tmpfile: ambiguous redirect
/etc/sysconfig/network-scripts/ifup-ipsec: line 228: $tmpfile: ambiguous redirect
mv: missing file argument
Try `mv --help' for more information.
/etc/sysconfig/network-scripts/ifup-ipsec: line 232: /etc/racoon/destination_sme_external_ip.conf: No such file or directory
/etc/sysconfig/network-scripts/ifup-ipsec: line 239: /etc/racoon/destination_sme_external_ip.conf: No such file or directory
mktemp: cannot create temp file /etc/racoon/racoon.aj6206: No such file or directory
/etc/sysconfig/network-scripts/ifup-ipsec: line 286: $racoontmp: ambiguous redirect
/etc/sysconfig/network-scripts/ifup-ipsec: line 287: $racoontmp: ambiguous redirect
mv: missing file argument
Try `mv --help' for more information.
/etc/sysconfig/network-scripts/ifup-ipsec: line 292: /usr/sbin/racoon: No such file or directory

Has anyone experienced issues like this? Any help greatly appreciated!!!

Richard

Offline Stefano

  • *
  • 10,836
  • +2/-0
Re: Site to Site VPN SME 7.5.1
« Reply #1 on: February 12, 2012, 02:56:51 PM »
AFAIK ipsec contrib is not supported anymore

you should take a look here: http://wiki.contribs.org/OpenVPN_SiteToSite

Offline aberlake

  • 7
  • +0/-0
Re: Site to Site VPN SME 7.5.1
« Reply #2 on: February 12, 2012, 09:18:04 PM »
Many thanks to Stefano. Open VPN contrib really rocks! Many thanks also to Daniel B for such a simple to use and clearly documented contrib. It just works :)