topic Re: IPSEC on RHEL in Operating System - Linux

IPSEC on RHEL

Mike_Swift — Thu, 01 Sep 2011 17:46:43 GMT

Greetings!

Could someone please let me know where to start with this topic "IPSEC on RHEL" ? I am really intrested in learning and knowing about this security feature. Please help, I have a test box in our company and i ould like to test this.

Thanks

Mike.

Re: IPSEC on RHEL

Mike_Swift — Mon, 19 Sep 2011 19:51:07 GMT

Any thoughts??

Mike

Re: IPSEC on RHEL

Naj — Tue, 20 Sep 2011 05:28:12 GMT

Hi,

Sound interesting, please just raise your doubt and any info

Thanks

Re: IPSEC on RHEL

Mike_Swift — Tue, 20 Sep 2011 15:38:29 GMT

I am aware of the basic IPSEC set up (host to host), I am more intrested in setting up IPSEC from a linux host via firewall, and also to a Juniper and also the cases where it needs to be terminated. So the usual stuff about linux to linux is not applicable here! Please let me know if someone has more ideas/links on this.

Thanks

Mike.

Re: IPSEC on RHEL

Matti_Kurkela — Wed, 21 Sep 2011 15:27:26 GMT

Do you understand IPSEC at the conceptual level? Do you know what Phase 1 and Phase 2 are, and can you determine what kind of IPSEC security proposals you wish to use/accept? Do you want to use IPSEC in tunnel or transport mode?

At least on my Debian system, I have three separate IPSEC suites available: isakmpd, openswan and racoon. Do you have any preferences on them?

Google is your friend: I googled for "linux ipsec interoperability juniper" and even the first hit looked like it might be useful to you.

If you want to configure a firewall to pass through IPSEC traffic, you just need to allow its component protocols: for basic IPSEC, you need port 500/UDP for the ISAKMP key management protocol, and protocol numbers 50 (and maybe 51) for the payload. If you need NAT traversal (NAT-T), port 4500/UDP is required.

To adequately answer an open question like this, a day-long lecture might be needed - and that is obviously hard to provide in a discussion forum. You might get better answers if you can nail down your requirements with more specificity. Otherwise, I must recommend that you check the IT training providers and/or universities near you for IPSEC training courses.