IPsec Server on Mac OS X Server 10.2.2?

[Anonymous]

I have (or, in some cases, will have very shortly) a basic small network, a desktop running Mac OS X server 10.2.2, a wireless access point (ethernet to wireless basically, nothing special), an iBook connecting via airport (OS X client 10.2.2) and a few other computers that will be getting 10.2.2 shortly. My desktop does a fine job of the basic DHCP/NAT/Apache and such, but I’m looking for something more – a VPN for my soon-to-be wireless network. I read the article on setting up a PPTP VPN server, but I’d like to have my server set up as a VPN server and forcing all data going through the ethernet port to be running on a VPN, preferably IPsec although PPTP is better than nothing. I read the article on setting up client to client IPsec tunnels, but because I have multiple computers at home and will have others (they will be running 10.2.2) visit on a fairly regular occasion, I want to have a server that provides for secure connections among all connected to it so I don’t have to set up tons of client to client networks.

I’m kind of looking for an arrangement like some people have with IPsec routers (and connect using VaporSec), except I really want to use my OS X server so that I have an all-in-one solution because I’d end up using it anyway and don’t really want to buy even more stuff (wireless networking gear still isn’t exactly cheap).

Anybody have any thoughts?

Galen
blueandwhiteg3 at softhome dot net

[Anonymous]

OK, thanks! I’ll do some looking into this. I’ve found someone who’s very familiar with Unix and has done lots of VPNs and should be able to help me.

Galen

[jaharmi]

Have you had any luck doing this?

I’d really like to do the same thing; I think we are in the same situation.

I would also like to harden my DHCP server a bit. I’m just using DHCP as it’s being run by Apple’s InternetSharing service. But I’d like to be able to block unknown MAC addresses on my wireless LAN.

I would also like to find a way (not involving WEP) that I can disable the broadcast of my wireless network name to everyone in my area. I’m all in favor of wireless community WANs, but I’ve got a TiVo on my network. And my TiVo is a Linux box with about zero security on it (no password required to Telnet in, for example).

I’m at least trying to close up the obvious holes in my security to prevent problems.

[Author]

Posts