https://wiki.ixheim.de/index.php?action=history&feed=atom&title=Strongswan_zu_racoon_psk 2026-06-29T02:36:16Z Versionsgeschichte dieser Seite in Xinux Wiki MediaWiki 1.35.1 https://wiki.ixheim.de/index.php?title=Strongswan_zu_racoon_psk&diff=12772&oldid=prev 2017-03-30T13:23:59Z

<p>Die Seite wurde neu angelegt: „=Strongswan konfigurieren ( PSK )= ==Tunnel Parameter definieren== ;Tunnelkonfiguration /etc/ipsec.conf keyexchange=ikev1 authby=secret left=192.168.2…“</p> <p><b>Neue Seite</b></p><div>=Strongswan konfigurieren ( PSK )=<br /> ==Tunnel Parameter definieren==<br /> ;Tunnelkonfiguration<br /> /etc/ipsec.conf<br /> keyexchange=ikev1<br /> authby=secret<br /> left=192.168.244.152<br /> leftsubnet=10.88.88.0/24<br /> right=192.168.244.151<br /> rightsubnet=10.18.44.0/24<br /> ike=aes256-md5-modp1024<br /> esp=aes256-md5-modp1024<br /> auto=add<br /> ;PSK definieren<br /> /etc/ipsec.secrets<br /> 192.168.244.152 192.168.244.151 : PSK &quot;katzenklo&quot;<br /> =Racoon (PSK )=<br /> ==Tunnel Parameter definieren==<br /> ;Tunnelkonfiguration<br /> /etc/racoon/racoon.conf <br /> &lt;pre&gt;<br /> path pre_shared_key &quot;/etc/racoon/psk.txt&quot;;<br /> remote 192.168.244.151 {<br /> exchange_mode main;<br /> proposal {<br /> encryption_algorithm aes256;<br /> hash_algorithm md5;<br /> authentication_method pre_shared_key;<br /> dh_group modp1024;<br /> }<br /> generate_policy off;<br /> }<br /> <br /> sainfo address 10.88.88.0/24 any address 10.18.44.0/24 any {<br /> pfs_group modp1024;<br /> encryption_algorithm aes256;<br /> authentication_algorithm hmac_md5;<br /> compression_algorithm deflate;<br /> }<br /> &lt;/pre&gt;<br /> /etc/ipsec-tools.conf<br /> &lt;pre&gt;<br /> #!/usr/sbin/setkey -f<br /> flush;<br /> spdflush;<br /> <br /> spdadd 10.88.88.0/24 10.18.44.0/24 any -P out ipsec<br /> esp/tunnel/192.168.244.152-192.168.244.151/require;<br /> <br /> spdadd 10.18.44.0/24 10.88.88.0/24 any -P in ipsec<br /> esp/tunnel/192.168.244.151-192.168.244.152/require;<br /> &lt;/pre&gt;<br /> ;PSK definieren<br /> /etc/racoon/psk.txt <br /> 192.168.244.151 katzenklo</div>

Thomas