Mobile IPsec on Pfsense

You can connect a number of devices to pfSense 2.0 using IPsec, most notably Android (Phones and Tablets) and iOS (iPhone, iPad, iPod Touch, etc) devices but anything that is capable of IPsec will typically work. This document covers the most common setup for mobile devices, which is IPsec using Xauth and a mutual Pre-Shared Key.

1. IPsec Server Setup

This is the setup for the pfSense side of the connection
#Mobile Clients

Setup Debian netboot server on Synology

1. Install dnsmasq

Before installing dnsmasq, install optware if you haven’t done so (see [1]). Then install dnsmasq via ipkg:

ipkg install dnsmasq

2. Configuration

Edit dnsmasq.conf in /opt/etc, the following is sample config (or check the original example [2]):

# DHCP IP range and lease
dhcp-range=192.168.0.100,192.168.0.200,255.255.255.0,12h
dhcp-leasefile=/opt/var/lib/dnsmasq.leases
# DHCP Fixed IP settings
dhcp-host=XX:XX:XX:XX:XX:XX,192.168.0.101
# DHCP gateway option
dhcp-option=option:router,192.168.0.1
# DHCP dns option, if you don't want to use dnsmasq's DNS service
dhcp-option=option:dns-server,8.8.8.8,4.4.4.2
 
# PXE boot options
dhcp-boot=pxelinux.0
enable-tftp
tftp-root=/volume1/netboot

3. Prepare tftp root directory

The above configuration sets the root directory for tftp server to /volume1/netboot. If it is not there already, create it and put Debian netboot files ([3]) there.

mkdir /volume1/netboot
wget –O - http://ftp.debian.org/debian/dists/stable/main/installer-amd64/current/images/netboot/netboot.tar.gz | tar xzf - 

Around this city

June @ Auckland

Technically, this is the second time i landed in Kiwiland,
my first time was last year when i transit to Papeeta from AKL airport.

SkyTower ~ The highest man-made structure on South Hemisphere.

I spent 1 hour in AKL airport just for the immigration interview and custom check.
It turn out that the officer check all teenagers for MAS airlines, am I looks like a drug mule?
It is all about this

http://www.stuff.co.nz/auckland/local-news/5206727/Malaysian-drug-mule-pleads-guilty

Shame on them.
Ok, let get something exciting...

Pirates of the Caribbean: On Stranger Tides, GSC@The Gardens

又一部海盗迷不容错过的。

一点三十分，我那固若金汤的无敌门锁把我反锁在房间里面。差点让我错过了三点场。


它的下场。。。

 

Colombo - April2011 Part 2

Entrance to Cargills (Ceylon),

A supermarket inside colonial theme building.
KFC too!

The building ...

Colombo - April2011

Colombo is the largest city and former capital of Sri Lanka.
Unfortunately, April & May => raining season.
Since my first day here, everyday is a raining day with or without thunderstorms.

For the very first week,
settle down myself in Colombo 4, Bambalapitiya.
Near to food city.
:-)

Local speak Sinhalese and fluent English.

 This small little kitchen near to Colombo city hotel,
I have my lunch here most of the time, as it is near to the office...

Sha-Sha Roll Shabu-Shabu

This is my 3rd visit to the same shop.
No doubt the food is nice which is very
contrast with their front desk service.

Desert

 The left ice-cream for me,
the right ice-creamssss for Martin Fu.

九十分钟

九十分钟直下，
发现身体已近大不如前，
手脚酸痛， :-D
是时候好好锻炼锻炼。

I am trying my very best to squeeze my schedule and make it my weekly routine.

Gambateh!

Marvell Kirkwood MV6282 1.6Ghz ARM

Finally, i have bought my 1st NAS on 22March2011.
Between Synology and QNAP, i made my choice.

Besides the price tag but the nice interface and forum support.
For the next few weeks, I can imagine i'll be very busy
setting up my first ARM linux box.

By the way, [My first x86 linux => Fedora 5 x86 @ 2005]
The very first i would like to try to cross compile Gnokii on my Ubuntu 9.

Install Seagate HDD on my DS111.