Comments on: IPsec and ALMOST CheckPoint

By: cristina_crow

cristina_crow — Tue, 22 Jun 2010 13:38:34 +0000

@joe: hmm, not really. Not for RemoteAccess anyway – PSK and not with Office Mode (as they call the ModeCfg).

I managed to run Site-to-Site very well – both PSK and RSA, and also RemoteAccess – RSA only without Office Mode.

By: joe

joe — Tue, 22 Jun 2010 13:18:33 +0000

Hey, I was just wondering: did you ever manage to solve this problem?

By: cristina_crow

cristina_crow — Sat, 20 Feb 2010 23:02:17 +0000

@ricardo: cool; thanks a lot for the comment; I’ve always wanted to try out racoon, maybe now it’s the time to do that

By: riccardo

riccardo — Sat, 20 Feb 2010 17:32:06 +0000

I’ve succesfully followed the guide at http://www.fw-1.de/aerasec/ng/vpn-racoon/CP-VPN1-NG-Linux-racoon-roadwarrior.html
with only minor changes. On my setup I had to disable server cert verification, because CP hands you conflicting informations.
So my remote config on client is

remote x.x.x.x {
exchange_mode_main;
certificate_type x509 “server.pem” “serverkey.pem”;
my_identifier asn1dn;
peers_identifier asn1dn;
verify_cert off;
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method rsasig;
dh_group modp1024;
}
}