pfSense Experiments and Fixes

I’ve been working on my portable VPN gateway, and I have to admin its been a tough nut to crack. Not only did something get screwed up with my compact flash card, but I managed to totally disable two compact flash cards. I didn’t have a compact flash card, so what was I to do?

Thankfully, the new ALIX boards can PXE boot. I did this using debian, and then downloaded the pfSense image and flashed it to the compact flash card. So far so good!

Linux Networking Cookbook Pre-Review

I’m currently reading the “Linux Networking Cookbook”, by Carla Schroder. I chose this book as I’m constantly working with networks, primarily with linux workstations and notebooks, Mac OS X desktops, as well as FreeBSD based (pfSense and m0n0wall) firewalls and routers.

While pfSense and m0n0wall make setting up a firewall and VPN pretty easy, I stil have many questions about routing, sub-netting and network architecture best practices. I hope by reading this book, I’ll gain a better understanding of how “good” networks are built, and how to avoid potential problems with an uncertain future about how a network will evolve and be used.

‘nm-applet’(usr/bin/nm-applet) wants access to keyring




This was driving me crazy!! Every time I’d try and use nm-applet to configure my wireless internet with WPA, it would connect, but then be unable to save or retrieve the password afterwards. Grr! That essentially caused it not to work at all.

Thankfully, I was able to fix it. Thanks to the Ubuntu forums (Ubuntu is based off of debian), I found a solution which worked for me. I moved the keyring folder inside of ~/.gnome2/, and then tried again. It asked me for a new password, and so far so good!

Thanks: http://ubuntuforums.org/showthread.php?t=130192

racoon: ERROR: can’t start the quick mode, there is no ISAKMP-SA

Not sure what’s up with this error - I’m trying to connect to my office VPN from the Rockville, MD library, using a portable pfSense gateway.

I tried changing from aggressive to main line mode, but now I get:
racoon: ERROR: not acceptable Identity Protection mode

Right, you must use aggressive, according to the m0n0wall docs by Chris:

You must use aggressive mode, as only IP addresses can be used as identifiers in main mode.

[*]

I never was able to get the VPN to work from the library, probably a firewall issue.