Re: Openwrt cipe kmod for 2.4.30

[Andreas Billmeier]

On Tue, 31 May 2005 16:47:04 +0200 Florian Fainelli <florian@...> wrote:

Hi Florian,

> Just updated cipe this afternoon, it is now ready to be used.

Thanks a big Lot :-) for your work on that.

> The makefile is also available at
> http://openwrt.alphacore.net/experimental-sources

Sorry, can´t find it there.
But, I am happy with the binaries for now,
these a only for checking out some new broadcom boards.

I only feel more comfortable if I know that I could compile it.

> You will need the crcgen x86 executable to complete installation.

Yes, thanks, i already passed this point, and hacked this in the makefile.
http://openwrt.alphacore.net/sources/cipe/
But after that, I messed with it,
the old Makefile didn´t match most of the $TOPDIR/rules.mk variables.

\B.

 

> Have fun with it :)
>
> Le Mardi 31 Mai 2005 12:53, Andreas Billmeier a écrit :
> > Dear Florian,
> >
> > could i please get your openwrt makefile for cipe 1.6.0,
> > i´d like to compile it against the current experimental release.
> >
> > I am currently using your current version on 6 asus wl500 an 2 linksys
> > routers, stable as a rock, behind german dsl dialup lines.
> >
> > i already tried to compile it with the 2005-04-16 tree, no way, i messed up
> > some path´s.
> >
> >
> > ys,
> > Andreas
>
> --
> Cordialement, Florian
>
> Association Nantes-Wireless
> www.nantes-wireless.org
>
> www.alphacore.net

--
Message sent by the cipe-l@... mailing list.
Unsubscribe: mail majordomo@..., "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>

[Andreas Billmeier]

On Tue, 31 May 2005 18:05:42 +0200 Florian Fainelli <florian@...> wrote:

> Maybe, as I did not uploaded the source file at the same time, they were not
> downloadable. I believe that now it's ok at the following url :
>
> http://openwrt.alphacore.net/experimental-sources/cipe/

Yep, it is. Thanx.

> I'm happy to see it works fine for you, quite everyday I receive messages
> telling me this or this feature don't work for this or this package ;)

:-)
by the Way, something political:
The Package lists libssl (which normally means you have to install 1.2 Mb of openssl) as an dependency.
One of the major reasons to use CIPE on this kind of boxes is his very low flashmem consumption,
so i believe nobody uses pkcipe on openwrt. Cipe doesn´t use the openssl libs, except for pkcipe.
Perhaps there should be a seperate Package for pkcipe, this (normally) unneccessary dependency is confusing some guys.

> Have a nice evening

U2,
and again, big respect und a lots of THANK YOU´s for your fine work.

\Andreas.

--
Message sent by the cipe-l@... mailing list.
Unsubscribe: mail majordomo@..., "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>

[Andreas Billmeier]

On Wed, 1 Jun 2005 00:27:00 +0530 Robin Harwani <robin.harwani@...> wrote:

> hello
> do we need real ip for implementin cipe?i am not able to understand the
> various parameters whn configuring cipe..
> please suggest some reference for it and answer my query for real ip
> regards,
> robin


What, please, is an un-real ip ?
Both Peers _must_ be able to send an UDP Paket to each other.

\B.


> --
> Message sent by the cipe-l@... mailing list.
> Unsubscribe: mail majordomo@..., "unsubscribe cipe-l" in body
> Other commands available with "help" in body to the same address.
> CIPE info and list archive: <URL:
> http://sites.inka.de/~bigred/devel/cipe.html>

--
Message sent by the cipe-l@... mailing list.
Unsubscribe: mail majordomo@..., "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>

[Andreas Billmeier]

On Wed, 1 Jun 2005 10:49:54 +0530 Robin Harwani <robin.harwani@...> wrote:

> real ip is the ip which is not an internal ip in the network for
> e.g.10.10.1.1 is a internal ip of the network
> so can cipe be configured from such an ip.
> im new to vpn s as m into final year engineering and im doin a project on
> "remote server configuration on linux vpn ".

hi,

if your question is if it´s possible to connect a tunnel with cipe when the external interfaces are behind routers,
your routers do something like NAT oder Adress-Translation, then here we go:

if you have no access to the router, simply use openvpn, it connects via TCP.

If you have access to the router, it is possible do do this with cipe,
you only have to forward cipe´s udp-port from the external interface to the host the cipe peer is running at.

An example:

Your (internal) cipe-peer is at 192.168.32.253, the remote network is 192.168.33.0/24
your cipe.conf looks like this:

device cipcb0
dynip
ptpaddr 192.168.33.253
ipaddr  192.168.32.253
cttl=64
me      0.0.0.0:19981
peer    cipe.remote.net:19981
maxerr -1

you now must forward all udp 19981 from your routers external interface to 192.168.32.253:19981
your cipe hosts has to have a route to cipe.remote.net via the same router.
if your borderrouter is a linux box at 192.168.32.254, you could do this for exp. with:

EXTIF=ppp0
iptables -t nat -A PREROUTING -i $EXT_IF -p udp --sport 19981 --dport 19981 -j DNAT --to 192.168.32.253:19981

# on the cipe box:
ip route add cipe.remote.net via 192.168.32.254
ip route add 192.168.33.0/24 via 192.168.33.253 dev cipcb0

I have one peer like that running behind a dialup dsl line,
there are problems if the (in this case dynamically assigned) external ip changes.
I have a timed script running to force this change once a day in the early morning,
this script kills and restarts the tunnel at the same time.

By the Way, please, send your questions to the list,
there are some other opinions for sure.

ys
\B.

--
Message sent by the cipe-l@... mailing list.
Unsubscribe: mail majordomo@..., "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>