{"id":7,"date":"2008-04-09T16:27:49","date_gmt":"2008-04-09T14:27:49","guid":{"rendered":"https:\/\/vpn.univ-fcomte.fr\/?p=7"},"modified":"2008-06-18T08:03:00","modified_gmt":"2008-06-18T06:03:00","slug":"configuration-linux-avec-nat","status":"publish","type":"post","link":"https:\/\/vpn.univ-fcomte.fr\/?p=7","title":{"rendered":"Configuration Linux avec ou sans NAT"},"content":{"rendered":"

Le fichier \/etc\/ipsec.conf<\/small><\/code> permet de d\u00e9terminer si on utilise le NAT ou non.<\/p>\n

Que l’on soit nat\u00e9<\/strong> (chez soit avec sa ligne ADSL par exemple) ou non<\/strong>, vous pouvez utiliser dans la rubrique config setup
\nnat_traversal=yes<\/small><\/code><\/p>\n

Tr\u00e8s important<\/strong> dans la rubrique conn ufc-vpn<\/small><\/code>
\nleftnexthop=192.168.1.254<\/small><\/code><\/p>\n

Attention \u00e0 mettre l’adresse de son routeur \u00e0 la place du 192.168.1.254<\/p>\n

Le client ipsec.conf configur\u00e9 ici avec le serveur VPN 194.57.91.251
\nversion 2
\nconfig setup
\nuniqueids=yes
\nnhelpers=0
\nnat_traversal=yes<\/strong><\/small><\/code><\/p>\n

conn vpn-ufc
\nauthby=rsasig
\nkeyingtries=1
\nrightprotoport=17\/1701
\nleftprotoport=17\/1701
\nkeyexchange=ike
\npfs=no
\nauto=add
\nleft=%defaultroute
\nleftnexthop=192.168.1.254<\/strong>
\nleftcert=\"\/etc\/ipsec.d\/certs\/vpn-cri-29-cert.ufc.pem\"
\nleftrsasigkey=%cert
\nleftsendcert=always
\nright=194.57.91.251
\nrightrsasigkey=%cert
\nrightca=%same
\n<\/small><\/code><\/p>\n

le fichier \/etc\/ipsec.secrets<\/code> :
\n: RSA \/etc\/ipsec.d\/private\/vpn-cri-29-cert.key \"testvpncri29\"<\/small><\/code><\/p>\n

le fichier xl2tpd.conf<\/small><\/code> ou l2tpd.conf<\/small><\/code> :
\n[global]
\nport = 1701<\/small><\/code><\/p>\n

[lac user2]
\nlns = 194.57.91.251
\nredial = yes
\nredial timeout = 5
\nmax redials = 3
\nlength bit = yes
\nrequire authentication = no
\nrefuse chap = yes
\nrequire pap = yes
\nname = user2
\nppp debug = yes
\npppoptfile = \/etc\/ppp\/options.l2tpd.client<\/small><\/code><\/p>\n

le fichier \/etc\/ppp\/options.l2tpd.client<\/small><\/code> :
\n
\ndefaultroute
\nreplacedefaultroute
\ndebug
\nlock
\nuser user2@lifc-edu
\nnoipdefault
\nusepeerdns
\nnoauth
\nlcp-echo-interval 20
\nlcp-echo-failure 10
\nnoaccomp
\n<\/small><\/code><\/p>\n

le fichier \/etc\/ppp\/pap-secrets<\/small><\/code> :
\nuser2@lifc-edu * ''user2''<\/small><\/code>
\nou<\/p>\n

Cela peut \u00eatre \u00e9vit\u00e9 en utilisant l’astuce d\u00e9crite dans cet article<\/a><\/p>\n

Le montage du lien s’effectue en deux temps. IPSEC puis XL2TP<\/strong>
\nipsec auto --up ufc-vpn
\necho ''c user2'' > \/var\/run\/xl2tpd\/l2tp-control<\/small><\/code><\/p>\n

L’arr\u00eat du lien s’effectue par :
\necho ''d user2'' > \/var\/run\/xl2tpd\/l2tp-control
\nipsec auto --down ufc-vpn<\/small><\/code><\/p>\n

Si vous utilisez L2TP<\/strong> les fichiers de configuration auront les m\u00eames contenu, mais le lancement s’effectue par :
\nipsec auto --up ufc-vpn
\necho ''c user2'' > \/var\/run\/l2tp-control<\/small><\/code><\/p>\n

L’arr\u00eat du lien s’effectue par :
\necho ''d user2'' > \/var\/run\/l2tp-control
\nipsec auto --down ufc-vpn<\/small><\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Le fichier \/etc\/ipsec.conf permet de d\u00e9terminer si on utilise le NAT ou non. Que l’on soit nat\u00e9 (chez soit avec sa ligne ADSL par exemple) ou non, vous pouvez utiliser dans la rubrique config setup nat_traversal=yes Tr\u00e8s important dans la rubrique conn ufc-vpn leftnexthop=192.168.1.254 Attention \u00e0 mettre l’adresse de son routeur \u00e0 la place du […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[5,19,18,6],"class_list":["post-7","post","type-post","status-publish","format-standard","hentry","category-informations-utilisateurs","tag-client","tag-configuration","tag-connexion","tag-linux"],"_links":{"self":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/7","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7"}],"version-history":[{"count":0,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/7\/revisions"}],"wp:attachment":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}