Strongswan-opnsense-dynamische-ip-psk

Opensense

Phase 1

Allgemein

Authentifizierung

Phase 2

Strongswan

/etc/ipsec.secret

10.85.9.6 @opnsense : PSK 0sc3lzYWRt

/etc/ipsec.conf

conn vpn
   authby=secret
   keyexchange=ikev2
   left=10.85.9.6
   leftid = 10.85.9.6
   leftsubnet="192.168.1.1/32"
   leftauth = psk
   rightauth = psk
   right=%any
   rightid = @opnsense.lab.intra
   rightsubnet="192.168.0.1/32"
   ike=aes256-sha256-modp4096!
   esp=aes256-sha256-modp4096!
   ikelifetime=28800s
   lifetime=3600s
   auto=add