Configure KillSwitch for an IPsec IKEv2 interface on OpenWRT

€30-250 EUR

Completed

Posted

about 3 years ago

€30-250 EUR

Paid on delivery

Necessary skills: Linux, OpenWRT, Strongswan (IPsec IKEv2), Iptables I want to configure an interface for IPsec IKEv2 on OpenWRT router (Asus RT-AC56U) which receives RX packets and sends TX packets. With the interface I want to configure a KillSwitch. By the KillSwitch, I mean a firewall rule that only allows VPN traffic through. (Attached is an example image of a configured KillSwitch). The configuration should run with the VPN provider www.perfect-privacy.com. In the attachment is again the configuration with a better formatting. This link could also help: [login to view URL] With this iptables rule, the RX packets reach OpenWRT (in /etc/[login to view URL]): iptables -t nat -A postrouting_wan_rule -s "${PRIVATE_SUBNET}" -m policy --dir out --pol none -j SNAT --to-source "${PLUTO_MY_SOURCEIP}" What I still need is an iptables rule that can send TX packets. Perhaps a VTI interface is also necessary.

Linux

Network Administration

Project ID: 29847831

About the project

2 proposals

Remote project

Active 3 yrs ago

Looking to make some money?

Email address

Benefits of bidding on Freelancer

Set your budget and timeframe

Get paid for your work

Outline your proposal

It's free to sign up and bid on jobs

Awarded to:

@AhmedMFakkar

€0 EUR in 1 day

4.9

(211 reviews)

7.0

2 freelancers are bidding on average €115 EUR for this job

@ExpertNetworkEng

Hello Dear, I am an Expert Network Engineer and I am working as Expert Network Engineer at a Multinational ISP. I have great hands-on experience for more than 15 years in various network technologies. I have Cisco CCNA & CCNP (Routing & Switching) and CCNP Enterprise (Enterprise Core & Enterprise Advanced Infrastructure Implementation) certifications. I have Juniper JNCIA-Junos (JN0-102) and JNCIA (Cloud) certifications. I have very good knowledge in Cisco wireless technology, VOIP & Network Security. My specialties: - Design/implement medium and large scale enterprise networks. - Configure Cisco Routers (ASR 1K & 9k, 2900, 2800, ISR 4K, 878, 888), Switches (Cat 6500, 3750, 3850, 2900, 2960, SG- 300, SG-500, [Nexus 5K, 7K and 9K]), Firewalls ([ASA 5505, 5506x, 5508], Fortigate, Palo Alto) and Wireless Acess Points 1800 and 2700. - Configure Juniper Routers (M7, M10, MX 480, MX 960) and SRX (300, 500). - Huawei, Mikrotik, HP & Ubiquiti devices Expert. - Packet Tracer, GNS-3, EVE-NG, VMWare workstation & VirtualBox Expert. - Routing protocols (RIP, OSPF, EIGRP, ISIS & BGP) Configuration and troubleshooting Expert and Switching Expert (VLANs, STP, VTP...). - VPN Configuration Expert (IPSEC/L2TP, GRE/PPTP, OPENVPN & SoftEther). - Linux, Unix & windows servers Expert. - Wireshark Traffic Capture & Analysis Expert. - Write technical reports and summaries. Thanks to check my profile and let me know if you are interested. Best Regards,

€30 EUR in 1 day