IPSec VPN できるようにするためのパッケージをインストールしていきます。 OpenWRT では 「racoon」 「OpenSwan」 「StrongSwan」 の3種類のIPSec ソリューションが用意されていますが、 『(2)ソフトウェアの選定』に書いたように今回は『StrongSwan』をインストールします。 *参考情報 この記事を書くにあたって以下の情報を参考にしています OpenWRTの公式サイトのDocument:[[『install/configure strongswan for IPhone/IPad』>>http://wiki.openwrt.org/inbox/strongswan.howto]] StrongSwan公式サイトのDocument: [[『iOS (Apple iPhone, iPad...) and Mac OS X』>>http://wiki.strongswan.org/projects/strongswan/wiki/IOS_%28Apple%29]] *パッケージインストール OpenWRTルータをインターネットに接続できるようにします。 WAN側をDHCP設定にしておけば、既存のNATルータの配下からでもアクセスできるので、環境構築時にはおすすめです。 OpenWRTのインストール直後はDHCP設定になっていると思います。 今回のような多くのパッケージをまとめてインストールする際にはOpenWRTルータにSSHして作業するのがお勧めですが、GUIでも同様のことはできます。 **CLIの場合 最初にopkgのパッケージリストを更新します。 root@OpenWrt:~# opkg update パッケージをインストールします。 以下 opkg install コマンドでインストールしてください。wikiの表示の関係で複数回実行していますが、全て一行にしてもOKです。 root@OpenWrt:~# opkg install strongswan-default strongswan-mod-dhcp strongswan-mod-af-alg root@OpenWrt:~# opkg install strongswan-mod-gcrypt strongswan-mod-blowfish strongswan-mod-md4 strongswan-mod-openssl root@OpenWrt:~# opkg install strongswan-mod-pkcs11 strongswan-mod-pkcs8 strongswan-mod-test-vectors strongswan-mod-farp root@OpenWrt:~# opkg install ipsec-tools openssl-util **GUIの場合 LuCiのWeb-GUIから接続し、「System」→「Software」の画面に移ります。 最初に[Update lists]のボタンを押してパッケージリストを更新します。 filter欄に下記のパッケージ名を入力・検索して[Install]リンクをクリックしてください。 -strongswan-default -strongswan-mod-dhcp -strongswan-mod-af-alg- -strongswan-mod-gcrypt -strongswan-mod-blowfish -strongswan-mod-md4 -strongswan-mod-openssl -strongswan-mod-pkcs11 -strongswan-mod-pkcs8 -strongswan-mod-test-vectors -strongswan-mod-farp -ipsec-tools -openssl-util *インストール結果 CLIでのインストールログの一部を転記します。個別にパッケージをダウンロードしてインストールする場合の参考にしてください。 **BHR-4RV BHR-4RVの場合、依存関係により以下のパッケージがインストールされました。 インストール後のflashメモリ領域の残りは "Free space: 39% (1.92 MB)" となりました。 2MByte近く使った計算になるので、Flash容量4MBの機種では難しいと思います。 ---- Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-default_5.0.0-1_brcm47xx.ipk Installing strongswan (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan_5.0.0-1_brcm47xx.ipk Installing libpthread (0.9.33.2-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/libpthread_0.9.33.2-1_brcm47xx.ipk Installing ip (3.3.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/ip_3.3.0-1_brcm47xx.ipk Installing kmod-crypto-authenc (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-authenc_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-manager (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-manager_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-hash (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-hash_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-core (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-core_3.3.8-1_brcm47xx.ipk Installing kmod-ipsec (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-ipsec_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-iv (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-iv_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-rng (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-rng_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-wq (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-wq_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-des (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-des_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-hmac (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-hmac_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-md5 (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-md5_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-sha1 (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-sha1_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-deflate (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-deflate_3.3.8-1_brcm47xx.ipk Installing kmod-lib-zlib (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-lib-zlib_3.3.8-1_brcm47xx.ipk Installing kmod-crypto-cbc (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-cbc_3.3.8-1_brcm47xx.ipk Installing kmod-ipsec4 (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-ipsec4_3.3.8-1_brcm47xx.ipk Installing kmod-iptunnel4 (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-iptunnel4_3.3.8-1_brcm47xx.ipk Installing kmod-ipsec6 (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-ipsec6_3.3.8-1_brcm47xx.ipk Installing kmod-iptunnel6 (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-iptunnel6_3.3.8-1_brcm47xx.ipk Installing kmod-ipv6 (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-ipv6_3.3.8-1_brcm47xx.ipk Installing kmod-ipt-ipsec (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-ipt-ipsec_3.3.8-1_brcm47xx.ipk Installing iptables-mod-ipsec (1.4.10-4) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/iptables-mod-ipsec_1.4.10-4_brcm47xx.ipk Installing strongswan-charon (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-charon_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-aes (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-aes_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-attr (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-attr_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-constraints (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-constraints_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-des (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-des_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-dnskey (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-dnskey_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-fips-prf (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-fips-prf_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-sha1 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-sha1_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-gmp (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-gmp_5.0.0-1_brcm47xx.ipk Installing libgmp (4.3.1-2) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/libgmp_4.3.1-2_brcm47xx.ipk Installing strongswan-mod-hmac (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-hmac_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-kernel-netlink (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-kernel-netlink_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-md5 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-md5_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-nonce (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-nonce_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-pem (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-pem_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-pgp (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-pgp_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-pkcs1 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-pkcs1_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-pubkey (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-pubkey_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-random (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-random_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-resolve (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-resolve_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-revocation (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-revocation_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-sha2 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-sha2_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-socket-default (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-socket-default_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-stroke (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-stroke_5.0.0-1_brcm47xx.ipk Installing strongswan-utils (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-utils_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-updown (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-updown_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-x509 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-x509_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-xauth-generic (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-xauth-generic_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-xcbc (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-xcbc_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-dhcp (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-dhcp_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-af-alg (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-af-alg_5.0.0-1_brcm47xx.ipk Installing kmod-crypto-user (3.3.8-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/kmod-crypto-user_3.3.8-1_brcm47xx.ipk Installing strongswan-mod-gcrypt (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-gcrypt_5.0.0-1_brcm47xx.ipk Installing libgcrypt (1.5.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/libgcrypt_1.5.0-1_brcm47xx.ipk Installing libgpg-error (1.9-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/libgpg-error_1.9-1_brcm47xx.ipk Installing strongswan-mod-blowfish (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-blowfish_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-md4 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-md4_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-openssl (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-openssl_5.0.0-1_brcm47xx.ipk Installing libopenssl (1.0.1e-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/libopenssl_1.0.1e-1_brcm47xx.ipk Installing zlib (1.2.7-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/zlib_1.2.7-1_brcm47xx.ipk Installing strongswan-mod-pkcs11 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-pkcs11_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-pkcs8 (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-pkcs8_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-test-vectors (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-test-vectors_5.0.0-1_brcm47xx.ipk Installing strongswan-mod-farp (5.0.0-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/strongswan-mod-farp_5.0.0-1_brcm47xx.ipk Installing ipsec-tools (0.8.0-2) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/ipsec-tools_0.8.0-2_brcm47xx.ipk Installing openssl-util (1.0.1e-1) to root... Downloading http://downloads.openwrt.org/attitude_adjustment/12.09/brcm47xx/generic/packages/openssl-util_1.0.1e-1_brcm47xx.ipk Configuring openssl-util. ----
