Strongswan-strongswan-dynamische-ip-cert: Unterschied zwischen den Versionen

Aus xinux.net
Zur Navigation springen Zur Suche springen
Zeile 1: Zeile 1:
=gustavo.xinux.lan=
+
=gustavo.vpn=
 
*/etc/ipsec.conf
 
*/etc/ipsec.conf
 
<pre>
 
<pre>
Zeile 17: Zeile 17:
 
*/etc/ipsec.secret
 
*/etc/ipsec.secret
 
  : RSA gustavo.vpn.int.key ""
 
  : RSA gustavo.vpn.int.key ""
 +
=tiazel.vpn.int=
 +
*/etc/ipsec.conf
 +
<pre>
 +
conn tiazel-gustavo
 +
        authby=rsasig
 +
        keyexchange=ikev1
 +
        leftcert=tiazel.vpn.int.crt
 +
        leftid="C=de, ST=rp, L=zw, O=vogel-it, OU=it, CN=tiazel.vpn.int"
 +
        leftsubnet="10.83.32.0/24"
 +
        right="10.84.252.33"
 +
        rightid="C=de, ST=rp, L=zw, O=vogel-it, OU=it, CN=gustavo.vpn.int"
 +
        rightsubnet=10.83.33.0/24
 +
        auto=add
 +
</pre>
 +
*/etc/ipsec.secret
 +
: RSA tiazel.vpn.int.key ""

Version vom 7. Dezember 2017, 18:48 Uhr

gustavo.vpn

  • /etc/ipsec.conf
conn tiazel-gustavo
        authby=rsasig
        keyexchange=ikev1
        left=%any
        leftid="C=de, ST=rp, L=zw, O=vogel-it, OU=it, CN=tiazel.vpn.int"
        leftsubnet="10.83.32.0/24"
        right=10.84.252.33
        rightcert=gustavo.vpn.int.crt
        rightid="C=de, ST=rp, L=zw, O=vogel-it, OU=it, CN=gustavo.vpn.int"
        rightsubnet=10.83.33.0/24
        auto=add

  • /etc/ipsec.secret
: RSA gustavo.vpn.int.key ""

tiazel.vpn.int

  • /etc/ipsec.conf
conn tiazel-gustavo
        authby=rsasig
        keyexchange=ikev1
        leftcert=tiazel.vpn.int.crt
        leftid="C=de, ST=rp, L=zw, O=vogel-it, OU=it, CN=tiazel.vpn.int"
        leftsubnet="10.83.32.0/24"
        right="10.84.252.33"
        rightid="C=de, ST=rp, L=zw, O=vogel-it, OU=it, CN=gustavo.vpn.int"
        rightsubnet=10.83.33.0/24
        auto=add
  • /etc/ipsec.secret
: RSA tiazel.vpn.int.key ""