Instal and setup IKEv2/IPsec on WD PR4100
up vote
0
down vote
favorite
I have a WD PR4100 NAS and would like to set up a IKEv2/IPsec VPN tunnel. Currently, I am using OpenVPN as it is installed.
I believe the system is BusyBox based. Any suggestions on how to install the package dependencies and set up the connection? Specifically, I am trying to connect with this tutorial. I am currently looking into docker implementations. However, it will be better if I can natively install and set up the connection instead of using a docker.
The only docker I have found that can act as a client (others only act as servers) is this, although when I edit the files as in the above tutorial, and then run
docker rm strongswan; docker run --net=host -v $PWD/config/strongswan.conf:/etc/strongswan.conf -v $PWD/config/ipsec.conf:/etc/ipsec.conf -v $PWD/config/ipsec.secrets:/etc/ipsec.secrets -v $PWD/config/ipsec.d:/etc/ipsec.d --name=strongswan stanback/alpine-strongswan-vpn
I get the following output
Starting strongSwan 5.6.1 IPsec [starter]...
modprobe: can't change directory to '/lib/modules': No such file or directory
no netkey IPsec stack detected
modprobe: can't change directory to '/lib/modules': No such file or directory
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
00[DMN] Starting IKE charon daemon (strongSwan 5.6.1, Linux 4.1.13, x86_64)
00[KNL] unable to create netlink socket: Protocol not supported (93)
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv6 on port 4500 failed
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv4 on port 4500 failed
00[LIB] feature CUSTOM:libcharon in critical plugin 'charon' has unmet dependency: CUSTOM:kernel-ipsec
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv4 routing table rule
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv6 routing table rule
00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
00[LIB] file coded in unknown format, discarded
00[LIB] building CRED_CERTIFICATE - X509 failed, tried 4 builders
00[CFG] loading ca certificate from '/etc/ipsec.d/cacerts/caCert.pem' failed
00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
00[CFG] loading crls from '/etc/ipsec.d/crls'
00[CFG] loading secrets from '/etc/ipsec.secrets'
00[CFG] loaded EAP secret for kazoku@protonmail.com
00[CFG] loaded 0 RADIUS server configurations
00[LIB] failed to load 1 critical plugin feature
00[DMN] initialization failed - aborting charon
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] received netlink error: Operation not permitted (1)
charon has quit: initialization failed
charon refused to be started
ipsec starter stopped
Apart from this I do not know if it is even possible to install everything separately and not use a docker as the BusyBox based system is limited from what I can see.
vpn nas busybox
asked Jul 17 at 19:50
James
512
add a comment |
up vote
0
down vote
favorite
I have a WD PR4100 NAS and would like to set up a IKEv2/IPsec VPN tunnel. Currently, I am using OpenVPN as it is installed.
I believe the system is BusyBox based. Any suggestions on how to install the package dependencies and set up the connection? Specifically, I am trying to connect with this tutorial. I am currently looking into docker implementations. However, it will be better if I can natively install and set up the connection instead of using a docker.
The only docker I have found that can act as a client (others only act as servers) is this, although when I edit the files as in the above tutorial, and then run
docker rm strongswan; docker run --net=host -v $PWD/config/strongswan.conf:/etc/strongswan.conf -v $PWD/config/ipsec.conf:/etc/ipsec.conf -v $PWD/config/ipsec.secrets:/etc/ipsec.secrets -v $PWD/config/ipsec.d:/etc/ipsec.d --name=strongswan stanback/alpine-strongswan-vpn
I get the following output
Starting strongSwan 5.6.1 IPsec [starter]...
modprobe: can't change directory to '/lib/modules': No such file or directory
no netkey IPsec stack detected
modprobe: can't change directory to '/lib/modules': No such file or directory
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
00[DMN] Starting IKE charon daemon (strongSwan 5.6.1, Linux 4.1.13, x86_64)
00[KNL] unable to create netlink socket: Protocol not supported (93)
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv6 on port 4500 failed
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv4 on port 4500 failed
00[LIB] feature CUSTOM:libcharon in critical plugin 'charon' has unmet dependency: CUSTOM:kernel-ipsec
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv4 routing table rule
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv6 routing table rule
00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
00[LIB] file coded in unknown format, discarded
00[LIB] building CRED_CERTIFICATE - X509 failed, tried 4 builders
00[CFG] loading ca certificate from '/etc/ipsec.d/cacerts/caCert.pem' failed
00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
00[CFG] loading crls from '/etc/ipsec.d/crls'
00[CFG] loading secrets from '/etc/ipsec.secrets'
00[CFG] loaded EAP secret for kazoku@protonmail.com
00[CFG] loaded 0 RADIUS server configurations
00[LIB] failed to load 1 critical plugin feature
00[DMN] initialization failed - aborting charon
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] received netlink error: Operation not permitted (1)
charon has quit: initialization failed
charon refused to be started
ipsec starter stopped
Apart from this I do not know if it is even possible to install everything separately and not use a docker as the BusyBox based system is limited from what I can see.
vpn nas busybox
asked Jul 17 at 19:50
James
512
What have you tried so far? Have you tried something and experienced a problem or encountered an error?
– music2myear
Jul 17 at 20:59
@music2myear I've added what I have tried.
– James
Jul 18 at 15:47
What's the output ofuname -a? That'll give you the full Linux version, processor architecture, ...
– Fabby
Aug 7 at 0:39
@FabbyLinux ------------ 4.1.13 #1 SMP Thu Nov 30 19:20:59 CST 2017 Build-gitdf6634a x86_64 GNU/Linux
– James
Aug 7 at 15:12
Too bad about the bounty: I cannot help you any further, but if you wouldn't find an answer here, delete it here or ask a moderator to migrate it to Unix & Linux.
– Fabby
Aug 7 at 19:54
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have a WD PR4100 NAS and would like to set up a IKEv2/IPsec VPN tunnel. Currently, I am using OpenVPN as it is installed.
I believe the system is BusyBox based. Any suggestions on how to install the package dependencies and set up the connection? Specifically, I am trying to connect with this tutorial. I am currently looking into docker implementations. However, it will be better if I can natively install and set up the connection instead of using a docker.
The only docker I have found that can act as a client (others only act as servers) is this, although when I edit the files as in the above tutorial, and then run
docker rm strongswan; docker run --net=host -v $PWD/config/strongswan.conf:/etc/strongswan.conf -v $PWD/config/ipsec.conf:/etc/ipsec.conf -v $PWD/config/ipsec.secrets:/etc/ipsec.secrets -v $PWD/config/ipsec.d:/etc/ipsec.d --name=strongswan stanback/alpine-strongswan-vpn
I get the following output
Starting strongSwan 5.6.1 IPsec [starter]...
modprobe: can't change directory to '/lib/modules': No such file or directory
no netkey IPsec stack detected
modprobe: can't change directory to '/lib/modules': No such file or directory
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
00[DMN] Starting IKE charon daemon (strongSwan 5.6.1, Linux 4.1.13, x86_64)
00[KNL] unable to create netlink socket: Protocol not supported (93)
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv6 on port 4500 failed
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv4 on port 4500 failed
00[LIB] feature CUSTOM:libcharon in critical plugin 'charon' has unmet dependency: CUSTOM:kernel-ipsec
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv4 routing table rule
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv6 routing table rule
00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
00[LIB] file coded in unknown format, discarded
00[LIB] building CRED_CERTIFICATE - X509 failed, tried 4 builders
00[CFG] loading ca certificate from '/etc/ipsec.d/cacerts/caCert.pem' failed
00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
00[CFG] loading crls from '/etc/ipsec.d/crls'
00[CFG] loading secrets from '/etc/ipsec.secrets'
00[CFG] loaded EAP secret for kazoku@protonmail.com
00[CFG] loaded 0 RADIUS server configurations
00[LIB] failed to load 1 critical plugin feature
00[DMN] initialization failed - aborting charon
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] received netlink error: Operation not permitted (1)
charon has quit: initialization failed
charon refused to be started
ipsec starter stopped
Apart from this I do not know if it is even possible to install everything separately and not use a docker as the BusyBox based system is limited from what I can see.
vpn nas busybox
asked Jul 17 at 19:50
James
512
I have a WD PR4100 NAS and would like to set up a IKEv2/IPsec VPN tunnel. Currently, I am using OpenVPN as it is installed.
I believe the system is BusyBox based. Any suggestions on how to install the package dependencies and set up the connection? Specifically, I am trying to connect with this tutorial. I am currently looking into docker implementations. However, it will be better if I can natively install and set up the connection instead of using a docker.
The only docker I have found that can act as a client (others only act as servers) is this, although when I edit the files as in the above tutorial, and then run
docker rm strongswan; docker run --net=host -v $PWD/config/strongswan.conf:/etc/strongswan.conf -v $PWD/config/ipsec.conf:/etc/ipsec.conf -v $PWD/config/ipsec.secrets:/etc/ipsec.secrets -v $PWD/config/ipsec.d:/etc/ipsec.d --name=strongswan stanback/alpine-strongswan-vpn
I get the following output
Starting strongSwan 5.6.1 IPsec [starter]...
modprobe: can't change directory to '/lib/modules': No such file or directory
no netkey IPsec stack detected
modprobe: can't change directory to '/lib/modules': No such file or directory
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!
00[DMN] Starting IKE charon daemon (strongSwan 5.6.1, Linux 4.1.13, x86_64)
00[KNL] unable to create netlink socket: Protocol not supported (93)
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv6 on port 4500 failed
00[NET] installing IKE bypass policy failed
00[NET] installing IKE bypass policy failed
00[NET] enabling UDP decapsulation for IPv4 on port 4500 failed
00[LIB] feature CUSTOM:libcharon in critical plugin 'charon' has unmet dependency: CUSTOM:kernel-ipsec
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv4 routing table rule
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] unable to create IPv6 routing table rule
00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
00[LIB] file coded in unknown format, discarded
00[LIB] building CRED_CERTIFICATE - X509 failed, tried 4 builders
00[CFG] loading ca certificate from '/etc/ipsec.d/cacerts/caCert.pem' failed
00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
00[CFG] loading crls from '/etc/ipsec.d/crls'
00[CFG] loading secrets from '/etc/ipsec.secrets'
00[CFG] loaded EAP secret for kazoku@protonmail.com
00[CFG] loaded 0 RADIUS server configurations
00[LIB] failed to load 1 critical plugin feature
00[DMN] initialization failed - aborting charon
00[KNL] received netlink error: Operation not permitted (1)
00[KNL] received netlink error: Operation not permitted (1)
charon has quit: initialization failed
charon refused to be started
ipsec starter stopped
Apart from this I do not know if it is even possible to install everything separately and not use a docker as the BusyBox based system is limited from what I can see.
vpn nas busybox
vpn nas busybox
asked Jul 17 at 19:50
James
512
asked Jul 17 at 19:50
James
512
edited Jul 18 at 15:47
asked Jul 17 at 19:50
James
512
asked Jul 17 at 19:50
James
512
asked Jul 17 at 19:50
James
512
512
What have you tried so far? Have you tried something and experienced a problem or encountered an error?
– music2myear
Jul 17 at 20:59
@music2myear I've added what I have tried.
– James
Jul 18 at 15:47
What's the output ofuname -a? That'll give you the full Linux version, processor architecture, ...
– Fabby
Aug 7 at 0:39
@FabbyLinux ------------ 4.1.13 #1 SMP Thu Nov 30 19:20:59 CST 2017 Build-gitdf6634a x86_64 GNU/Linux
– James
Aug 7 at 15:12
Too bad about the bounty: I cannot help you any further, but if you wouldn't find an answer here, delete it here or ask a moderator to migrate it to Unix & Linux.
– Fabby
Aug 7 at 19:54
add a comment |
What have you tried so far? Have you tried something and experienced a problem or encountered an error?
– music2myear
Jul 17 at 20:59
@music2myear I've added what I have tried.
– James
Jul 18 at 15:47
What's the output ofuname -a? That'll give you the full Linux version, processor architecture, ...
– Fabby
Aug 7 at 0:39
@FabbyLinux ------------ 4.1.13 #1 SMP Thu Nov 30 19:20:59 CST 2017 Build-gitdf6634a x86_64 GNU/Linux
– James
Aug 7 at 15:12
Too bad about the bounty: I cannot help you any further, but if you wouldn't find an answer here, delete it here or ask a moderator to migrate it to Unix & Linux.
– Fabby
Aug 7 at 19:54
What have you tried so far? Have you tried something and experienced a problem or encountered an error?
– music2myear
Jul 17 at 20:59
What have you tried so far? Have you tried something and experienced a problem or encountered an error?
– music2myear
Jul 17 at 20:59
@music2myear I've added what I have tried.
– James
Jul 18 at 15:47
@music2myear I've added what I have tried.
– James
Jul 18 at 15:47
What's the output of
uname -a? That'll give you the full Linux version, processor architecture, ...– Fabby
Aug 7 at 0:39
What's the output of
uname -a? That'll give you the full Linux version, processor architecture, ...– Fabby
Aug 7 at 0:39
@Fabby
Linux ------------ 4.1.13 #1 SMP Thu Nov 30 19:20:59 CST 2017 Build-gitdf6634a x86_64 GNU/Linux– James
Aug 7 at 15:12
@Fabby
Linux ------------ 4.1.13 #1 SMP Thu Nov 30 19:20:59 CST 2017 Build-gitdf6634a x86_64 GNU/Linux– James
Aug 7 at 15:12
Too bad about the bounty: I cannot help you any further, but if you wouldn't find an answer here, delete it here or ask a moderator to migrate it to Unix & Linux.
– Fabby
Aug 7 at 19:54
Too bad about the bounty: I cannot help you any further, but if you wouldn't find an answer here, delete it here or ask a moderator to migrate it to Unix & Linux.
– Fabby
Aug 7 at 19:54
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1340993%2finstal-and-setup-ikev2-ipsec-on-wd-pr4100%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
What have you tried so far? Have you tried something and experienced a problem or encountered an error?
– music2myear
Jul 17 at 20:59
@music2myear I've added what I have tried.
– James
Jul 18 at 15:47
What's the output of
uname -a? That'll give you the full Linux version, processor architecture, ...– Fabby
Aug 7 at 0:39
@Fabby
Linux ------------ 4.1.13 #1 SMP Thu Nov 30 19:20:59 CST 2017 Build-gitdf6634a x86_64 GNU/Linux– James
Aug 7 at 15:12
Too bad about the bounty: I cannot help you any further, but if you wouldn't find an answer here, delete it here or ask a moderator to migrate it to Unix & Linux.
– Fabby
Aug 7 at 19:54