IPsec

[Spearball]

I have an internet gateway setup like this...

Internet line......Gateway........Wireless access point/switch.........Other pcs
The gateway is running linux and I'm trying to setup ipsec so the clients can ONLY connect through the lan adapter on the gateway (File server, internet, etc) if they have ipsec certificate. Basically is someone gets in there would be no way to access anything through the gateway lan interface without using ipsec. Plus it secure the line and transfers to the server.

I'm using openswan to make the ipsec host/server but i really don't know how to and how i can accomplish this. I've read through the openswan instructions but no luck. To make it easier i used a pre shared key (I know it's not the best but its better than anything and i still can't get a connection). Also the other client pcs aren't running the windows firewall their running comodo so i don't know if this is the cause..... Also when the ipsec policy is assigned on the pcs i get no internet so that means the policy is actually running....but like i said, it's not working or properly accessing the ipsec on the server.

If anyone has a good understanding about networking/ipsec I'd really appreciate some help :) Thanks

[yawningdog]

If I understand your post correctly, Openswan and IPsec are probably the wrong solution for what you are trying to accomplish. IPsec is used to build VPN tunnels, but it sounds like you're trying to secure your wireless LAN.

It sounds like you can accomplish everything you need to with WPA, local/domain acounts, and firewalls. In what way are these methods not working for you?

By the way, thanks for bringing Openswan to my attention. I've been looking for something like this.

[Spearball]

I should have been clearer yea... Ok basically im just trying to understand ipsec and more about how it works. Im having trouble even just setting up a client to client (host to host) directing connection with ipsec. Im trying to use the ipsec tools in linux and the group policy ipsec in windows vista but no luck so far. I can't understand how it works because when i assign an ipsec connection on vista, when i open up my browser and try to access the other pc i get no connection for about 2 seconds then it connects. But when i check linux with "tcpdump" i don't see and ESP packets being sent so im lost there.

No problem for bringing up openswan by the way :)

[Variable]

So it works but your not seeing anything in tcpdump and that is where you think you should see ESP packets?
ESP is a protocol, you should see packets flowing over UDP or TCP ports probably UDP port 500.