Openswan-bintec-psk

Aus xinux.net
Zur Navigation springen Zur Suche springen

Openswan

  • /etc/ipsec.conf
version 2.0
config setup
     dumpdir=/var/run/pluto/
     nat_traversal=no
     oe=off
     protostack=netkey

conn b2o
     authby=secret
     left=192.168.252.200
     leftid=@rome
     leftsubnet=10.254.31.0/24
     right=192.168.252.122
     rightid=@bintec
     rightsubnet=10.254.34.0/24
     ike=aes256-md5-modp1536
     phase2alg=aes256-md5-1536
     pfs=yes
     auto=start
  • /etc/ipsec.secret
@bintec @rome  : PSK "suxer"

Bintec

IKE and IPSEC Config

Peer

  • VPN
    • IPSec
      • IPSec Peers
        • New

Sophos-bintec-psk11.png