RHEL7CentOS7 - Installation, Configuration & Management

Intro to Configure IPsec VPN (Gateway-to-Gateway ) using Strongswan Strongswan supports Gateway-to-Gateway (site-to-site) and Road warrior  types of VPN. In first type, network traffic is encrypted/decrypted on the gateway (entrance/exit) of an organization. However in Road warrior case, traffic encrypted from the end client (machine) to remote end gateway. In this article, we will explain creation of  tunnel between two sites of an organization to secure the communication. Strongswan based VPN server/gateway placement is shown in the following figure. We want to secure communication between 10.1.0.0/16 and 11.1.0.0/16 networks of organization. As shown in the above figure, we are interested to secure the communication from A to B and vice versa. It is important to make sure the routing of Strongswan based VPN Gateways in the organization network. We assume that machine from  office A can ping a machine in the network of B office . This will ensure th...

Install IPFire Linux Firewall Introduction IPFire is an Open Source Linux-based firewall distribution that can be configured to provide additional security for your data center. It contains VirtIO kernel modules and offers excellent performance on the KVM hypervisor. Requirements The system requirements for IPFire are quite modest. It is recommended that IPFire be configured with at least: 1 Processor Core 1GB RAM 4GB HDD/Disk Storage 2 Network Interfaces If you wish to retain a significant amount of activity logs or anticipate installing a number of add-on packages (via  pakfire ) please allocate additional disk storage space. It is recommended that a static/reserved IP address be assigned to the WAN/Public interface. Some additional information on the process of reserving an IP address can be found in our articles  Adding Secondary Virtual IP Addresses  and  Static IP Assignment Preparation IPFire is available for download at  htt...