Routing to a VPN

[Francis Ancheta]

How do I route my VPN (192.168.0.1-15) to the internet securely under a firewall using RH 8?

[Manuel Wolfshant]

I am not very sure about what you meant to do.
If you intend to create a VPN between your LAN and a remote site, here is one solution (the one I prefer most): first step: you need to setup the vpn. If you are using a kernel from the distribution or from RH updates, I suggest to retrieve from the download section of http://www.freeswan.org (or better yet, the patched version - superfreeswan - from from www.freeswan.ca ) the 2 rpm's adapted to the kernel version you are using. If you have compiled your own kernel, install freeswan (or superfreeswan) from the sources
step 2: configure the VPN. the file /etc/ipsec.conf.sample includes some comments but on the freeswan site you can find all the needed documentation.
other options for creating secure tunnels (i.e. VPNs) are cipe and openvpn.

If by "route my VPN [...] to the internet securely " you mean "how to offer internet access to those computers and keep communication safe", you will need to read about firewalls and masquarading.

I will be glad to help more, if you define your problem more precisely.

[Francis Ancheta]

Hi,

What I meant is that I have a VPN that I need to connect to another site using the Internet as a gateway. How do I do this securely? I also I would need some of my VPN clients to access the internet but not all of them. I believe I will be using iprouting and masquerading but I do not know how to go about it.

[Jerome Henry]

There are several solutions.

Read what RH suggest at
http://www.europe.redhat.com/documentation/rhl8.0/rhl-sg-en-8.0/ch-vpn.php3

When you'll choose an option, let us know if you have difficulties in implementing.
hth

J