IKEv2-setup - Set up Ubuntu Server 17.04 as an IKEv2 VPN server

  •        60

A Bash script that takes Ubuntu Server 17.04 from clean install to production-ready IKEv2 VPN with strongSwan. Comments and pull requests welcome.Configuration files, scripts and instructions are sent by email. They are also dropped in the newly-created non-root user's home directory on the server (this point may be important, because VPS providers sometimes block traffic on port 25 by default, and conscientious email providers will sometimes mark a successfully sent email as spam).

https://github.com/jawj/IKEv2-setup

Tags
Implementation
License
Platform

   




Related Projects

algo - Set up a personal IPSEC VPN in the cloud


Algo VPN is a set of Ansible scripts that simplify the setup of a personal IPSEC VPN. It uses the most secure defaults available, works with common cloud providers, and does not require client software on most devices. See our release announcement for more information. The easiest way to get an Algo server running is to let it set up a new virtual machine in the cloud for you.

strongSwan - IPsec-based VPN Solution


strongSwan is an OpenSource IPsec implementation. IPSec is an encryption and authentication standard that can be used to build secure Virtual Private Networks (VPNs). It has powerful IPsec policies supporting large and complex VPN networks. It implements both the IKEv1 and IKEv2 (RFC 7296) key exchange protocols.

Openswan - IPsec implementation for Linux


Openswan is an IPsec implementation for Linux. It has support for most of the extensions (RFC + IETF drafts) related to IPsec, including IKEv2, X.509 Digital Certificates, NAT Traversal, and many others. It has been the de-facto Virtual Private Network software for the Linux community since 2005. If you are running Fedora, Red Hat, Ubuntu, Debian (Wheezy), Gentoo, or many others, it is already included in your distribution.

EAP-IKEv2


Project contains a library and patches for freeRADIUS and wpa_supplicant which implements ideas of draft-tschofenig-eap-ikev2-12.txt Internet-Draft (http://tools.ietf.org/wg/eap/draft-tschofenig-eap-ikev2-12.txt)

voodooprivacy - Roll your own VPN server on Amazon EC2 and battle-ready firewall for OS X


Protect your computer from unsecure environment with a very strict firewall and a strong VPN through Amazon EC2. Thanks for your interest in this project! Lin Song has built a newer version which is tested with 2016 releases of Ubuntu/Debian/CentOS/RHEL and includes VPN setup instructions for a lot more platforms. It is available under the same license here.


PeerVPN - the open source peer-to-peer VPN


PeerVPN is a software that builds virtual ethernet networks between multiple computers. Such a virtual network can be useful to facilitate direct communication that applications like file sharing or gaming may need. Often, such direct communication is made impossible or very difficult by firewalls or NAT devices.

SoftEther VPN - Cross-platform Multi-protocol VPN Program


SoftEther VPN is a ?Cross-platform Multi-protocol VPN Program. It supports SSL-VPN protocol to penetrate any kinds of firewalls. Ultra-optimized SSL-VPN Protocol of SoftEther VPN has very fast throughput, low latency and firewall resistance. Virtualization of Ethernet devices is the key of the SoftEther VPN architecture. It virtualizes Ethernet devices in order to realize a flexible virtual private network for both remote-access VPN and site-to-site VPN.

Amahi Home Server - Making Home Networking Simple


The Amahi Home Server makes your home networking simple, It is called as Home Digital Assistant. Its core functionality include protecting your files and computers, Access, share and search your files from any machine on your network, making it easy to share and find your photos, music and videos, Automatically setup your own VPN, Shared applications like calendaring, private wiki and more to come, will help you manage your home and your family.

autovpn - Easily connect to a VPN in a country of your choice.


autovpn is a tool to automatically connect you to a random VPN in a country of your choice. It uses openvpn to connect you to a server obtained from VPN Gate.Tested and works on Fedora 23. Dunno about Windows. Patches welcome.

Wireguard - Fast, Modern, Secure, VPN Tunnel


WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances.

Tinc - a VPN daemon


tinc is a Virtual Private Network (VPN) daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet. All traffic is optionally compressed using zlib or LZO, and LibreSSL or OpenSSL is used to encrypt the traffic and protect it from alteration with message authentication codes and sequence numbers.

smartvpn-billing - Billing and auth system for VPN provider


This is OpenSource, Free software. You may use it anyway you want. It is provided AS IS. Check out LICENSE file for more info.

CARMA VPN


CARMA VPN is a network management program written in PERL and CGI to assist in the implementation and management of a large fully meshed, fault tollerant, VPN network. The base network platform that CARMA VPN was developed for is Cisco IOS.

SocialVPN - P2P VPN that connects you to your friends computer


SocialVPN is an open-source IPOP-based virtual network that connects your computers privately to your friends’ computers. It automatically maps online social network relationships using Jingle and XMPP to create your own user-defined peer-to-peer VPNs – with no hassle, and supporting unmodified TCP/IP applications.

VPNOn - Turn On your VPN like a hero.


Turning on a VPN is always a painful experience on an iOS device due to the deep nested menus. This App installs a Today Widget into Notification Center which make it possible to turn on a VPN in about 3 seconds(depends on the connection speed). Furthermore, by turning on On Demand feature, the VPN could be automatically connected when you visit any domain specified in this App. Meanwhile, provisioning profiles are required for testing on iPhone/iPad.

ClearOS - Linux based Operating System


ClearOS is a powerful network and gateway server designed for small organizations and distributed environments. The open source revolution in the software industry has made it possible to provide ClearOS at no cost. Among other features, antivirus, antispam, VPN and content filtering are built right into the software -- no need for expensive third party add-ons. With ClearOS, you can avoid costly vendor lock-in and proprietary formats; instead, you can embrace open standards and protocols.

vpn-ws - A VPN system over websockets


This is the client/server implementation of a layer-2 software switch able to route packets over websockets connections. A client creates a tap (ethernet-like) local device and connects to a websocket server (preferably over HTTPS). Once the websocket handshake is done, every packet received from the tuntap will be forwarded to the websocket server, and every websocket packet received from the server will be forwarded to the tuntap device.

IPFire - An open source firewall solution


IPFire is a server distribution with intended to use as a firewall. It focuses on flexibility, and scales from small to middle sized business networks and home networks. Beginning with a small firewall system of a few megabytes, it is possible to run IPFire as a file server or VPN gateway for staff, branches or customers. This modularity means that yor version of IPFire runs with exactly what you require and nothing more.

VPNMonitor


Tool that monitors VPN connection and reconnect if specified hosts are unavailable. Tool can be installed as Windows Service, so VPN Monitor begins it's work as the computer starts. No human actions needed.

M0n0wall IPSEC VPN Auto Updater


M0n0wall currently doesn't support IPSEC VPN where one or both ends are dynamic IP addresses. This PHP script along with the dynamic DNS service built into m0n0wall, auto-updates the remote gateway IP address in the VPN configuration.