Strongswan-fritz-psk-dynamisch

Aus xinux.net
Zur Navigation springen Zur Suche springen

fritz


Strongswan

  • /etc/ipsec.conf
conn s2f
     authby=secret
     keyexchange=ikev1
     left=zee.vpn.int
     leftsubnet=10.83.31.0/24
     rightid=@fritzbox.vpn.int
     right=%any
     rightsubnet=10.83.42.0/24
     ike=aes-sha1-modp1024
     esp=3des-sha1-modp1024
     ikelifetime=3h
     keylife=1h
     auto=add
  • /etc/ipsec.secrets
@zee.vpn.int @fritzbox.vpn.int : PSK "suxer"