Strongswan-strongswan-psk-dynamisch

gustavo.vpn.int

• /etc/ipsec.conf

conn dyn-main
    authby=secret
    keyexchange=ikev1
    left=10.84.252.33
    leftid=@gustavo.vpn.int
    leftsubnet=10.83.33.0/24
    rightid=@tiazel.vpn.int
    right=%any
    rightsubnet=10.83.32.0/24
    ikelifetime=3h
    keylife=1h
    auto=add

• /etc/ipsec.secret

@gustavo.vpn.int @tiazel.vpn.int  : PSK "suxer"

tiazel.vpn.int

• /etc/ipsec.conf

conn dyn-main
    authby=secret
    keyexchange=ikev1
    right=10.84.252.33
    rightid=@gustavo.vpn.int
    rightsubnet=10.83.33.0/24
    left=%defaultroute
    leftid=@tiazel.vpn.int
    leftsubnet=10.83.32.0/24
    ikelifetime=3h
    keylife=1h
    auto=start

• /etc/ipsec.secret

@gustavo.vpn.int @tiazel.vpn.int  : PSK "suxer"