OPENSWAN XAUTH: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Thomas (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „*http://www.techques.com/question/2-212382/How-to-set-up-strongswan-or-openswan-for-pure-IPSEC-with-iPhone-client“) |
Thomas (Diskussion | Beiträge) |
||
| Zeile 1: | Zeile 1: | ||
| − | + | =xauth with psk and pam= | |
| + | ==/etc/ipsec.conf== | ||
| + | conn xauthserver | ||
| + | left=%defaultroute | ||
| + | authby=secret | ||
| + | leftxauthserver=yes | ||
| + | leftmodecfgserver=yes | ||
| + | leftsubnet=0.0.0.0/0 | ||
| + | right=%any | ||
| + | rightxauthclient=yes | ||
| + | rightmodecfgclient=yes | ||
| + | rekey=yes | ||
| + | modecfgpull=yes | ||
| + | modecfgdns1=192.168.240.200 | ||
| + | auto=add | ||
| + | pfs=no | ||
| + | ==/etc/ipsec.secrets== | ||
| + | 0.0.0.0 88.88.88.88 : PSK "oimel" | ||
Version vom 14. Oktober 2014, 14:40 Uhr
xauth with psk and pam
/etc/ipsec.conf
conn xauthserver
left=%defaultroute
authby=secret
leftxauthserver=yes
leftmodecfgserver=yes
leftsubnet=0.0.0.0/0
right=%any
rightxauthclient=yes
rightmodecfgclient=yes
rekey=yes
modecfgpull=yes
modecfgdns1=192.168.240.200
auto=add
pfs=no
/etc/ipsec.secrets
0.0.0.0 88.88.88.88 : PSK "oimel"