Racoon-fritz

Aus xinux.net
Zur Navigation springen Zur Suche springen

Fritz

  • Internet
    • Freigaben
      • VPN
        • Ihr Heimnetz mit einem anderen FRITZ!Box-Netzwerk verbinden (LAN-LAN-Kopplung)

Fritz-racoon2.png

Racoon

  • /etc/ipsec-tools.conf
#!/usr/sbin/setkey -f
flush;
spdflush;
spdadd 10.83.31.0/24 10.83.42.0/24 any -P out ipsec
       esp/tunnel/10.84.252.31-10.84.252.42/require; 
spdadd 10.83.42.0/24 10.83.31.0/24  any -P in ipsec
    esp/tunnel/10.84.252.42-10.84.252.31/require;
  • /etc/racoon.conf
log debug;
path pre_shared_key "/etc/racoon/psk.txt";

remote anonymous {
        exchange_mode aggressive;
        my_identifier fqdn zee.vpn.int;
        proposal_check obey;
        proposal {
                encryption_algorithm aes;
                hash_algorithm sha1;
                authentication_method pre_shared_key;
                dh_group 2;
        }
}

sainfo address 10.83.31.0/24 any address 10.83.42.0/24 any {
        #pfs_group 2;
        lifetime time 1 hour ;
        encryption_algorithm aes ;
        authentication_algorithm hmac_sha1 ;
        compression_algorithm deflate ;
}
  • /etc/racoon/psk.txt
10.84.252.33 suxer