search

xelerance / Openswan

Openswan
Other
849 stars 214 forks source link

How does centos7 set radius? #446

Open bbhxwl opened 3 years ago

bbhxwl commented 3 years ago

How does centos7 set radius?

bbhxwl commented 3 years ago

ARe you asking for OSW or is this for xl2tpd?

I just learned about openswan. Isn't it running independently? Need to rely on xl2tp?

shussain commented 3 years ago

@bbhxwl I am unsure what you are trying to achieve

xl2tpd is an implementation of Layer 2 Tunnel Protocol (RFC 2661). L2TP allows you to tunnel PPP over UDP. Some ISPs use L2TP to tunnel user sessions from dial-in servers (modem banks, ADSL DSLAMs) to back-end PPP servers.

Another important application is Virtual Private Networks (VPN) where you can use IPsec protocols (such as OSW) to secure the L2TP connection.

So to answer your question they are independent but can be used together. However, it is unclear to me what you mean by set radius. Presumably since you had originally posted it in the xl2tpd repo, you want to use radius to do authentication for an l2tp connection? if so, there are several Ubuntu tutorials/guides (e.g. https://www.howtoforge.com/tutorial/l2tp-over-ipsec-using-openswan-with-freeradius-authentication/) . You can adapt/modify them for CentOS

bbhxwl commented 3 years ago

@bbhxwl I am unsure what you are trying to achieve

xl2tpd is an implementation of Layer 2 Tunnel Protocol (RFC 2661). L2TP allows you to tunnel PPP over UDP. Some ISPs use L2TP to tunnel user sessions from dial-in servers (modem banks, ADSL DSLAMs) to back-end PPP servers.

Another important application is Virtual Private Networks (VPN) where you can use IPsec protocols (such as OSW) to secure the L2TP connection.

So to answer your question they are independent but can be used together. However, it is unclear to me what you mean by set radius. Presumably since you had originally posted it in the xl2tpd repo, you want to use radius to do authentication for an l2tp connection? if so, there are several Ubuntu tutorials/guides (e.g. https://www.howtoforge.com/tutorial/l2tp-over-ipsec-using-openswan-with-freeradius-authentication/) . You can adapt/modify them for CentOS

The thing is, the centos6 one click configuration PPTP + L2TP + IPSec script that I purchased previously was not available for centos7. Then I learned to use accel PPP Configure VPN, but this only supports PPTP + L2TP, can't be used by mobile phone. IPSec can be used in IOS, but I can't configure it. At present, I spend $50 to ask someone to write a one button installation script for me. I don't know if he will write it. I'll study it myself first. It seems that accel PPP and openswan can make mobile phones use IPSec protocol.

letoams commented 3 years ago

On Mon, 28 Sep 2020, bbhxwl wrote:

The thing is, the centos6 one click configuration PPTP + L2TP + IPSec script that I purchased previously was not available for centos7.

Have a look at the free script: https://github.com/hwdsl2/setup-ipsec-vpn

It has support for centos and xl2tpd.

Paul