Chapter 8

Unfortunately, older Mac OS X versions do not have this option. If you are running Panther, you will need to manually add and delete the default route. Here is an example script (taken from

http://guides.macrumors.com/):

Another method, which also comes from http://guides.macrumors.com/, is to replace pppd with a wrapper program. First move /usr/sbin/pppd to /usr/sbin/pppd.original. Then create the following file as pppd:

#!/usr/bin/perl my @args = @ARGV;

s/^defaultroute/nodefaultroute/ for @args; exec "/usr/sbin/pppd.original", @args;

When you have done this, select Connect in the VPN window, and the tunnel should come up automatically.

Server Configuration for X.509 IPsec without L2TP

All of the clients discussed below support both PSK and X.509. We will demonstrate configuration of X.509, since it is slightly more complex to set up. Remember that PSK and NAT-Traversal do not go together very well, so it is worth setting up the Windows clients using X.509. Again, we are using 192.168.1.0/24 as the remote office network that we wish our workers to connect to from home and the same VPN server, aivd.xelerance.com, with a public IP address assigned by its ISP of 193.110.157.131.

Openswan Configuration for X.509 without L2TP

The Openswan server configuration in /etc/ipsec.conf is fairly straightforward:

version 2 config setup

#klipsdebug=none

#plutodebug="control parsing" nat_traversal=yes

175