ipsec plugin for network-manager applet

Registered by Zenigata

As network-manager aims to make networking easy under linux, it would be a good idea to have it support every kind of more or less common vpn like things.

For most vpn there are plugins that work quite good, but there is nothing for ipsec tunneling support.

So the idea would be to get some plugin that allow one to make an ipsec tunnel giving some usual information, such as :

  * the start and end point of the tunnel
  * the essid of network for an automatic start of the tunnel if it concerns a wireless connection
  * the security algorithm
  * if the ipsec has to be encapsulated in another protocol or not
  * ...

Blueprint information

Status:
Not started
Approver:
None
Priority:
Undefined
Drafter:
None
Direction:
Needs approval
Assignee:
None
Definition:
New
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

take a look at this site
http://wiki.strongswan.org/wiki/strongswan/NetworkManager

=> This plugin only supports IKEv2 which is not widely use at all at the moment. Support for IKEv1 is needed.

The original request was from 2007, now it's 2012 and the issue still stands.

In the meantime (IIRC from 10.04 to 11.04) there was working support for IPsec/IKEv1 based VPNs in NM 0.8, but with the transition to GTK3 in NM 0.9 this vanished again.

To sum this up, currently there are:
* strongswan-nm --> only IKEv2
* openswan-nm --> only XAUTH-like (user _and_ group), no certificates
* openconnect-nm --> only Cisco Anyconnect (TM)
* vpnc-nm --> only XAUTH-like (user _and_ group), no certificates
* racoon --> nothing
* openvpn doesn't count (in this context)

Unfortunately I'm no coder, so my try to migrate the formerly working openswan-nm to NM0.9 and GTK3 failed. Even a simple plugin for NM, acting on connections defined in an existing ipsec.conf would help corporate users.

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.