Sophos-openswan-psk: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
(Die Seite wurde neu angelegt: „=Strongswan= *cat /etc/ipsec.conf <pre> conn sophos-strongswan authby=secret left=192.168.245.111 leftsubnet=172.17.135.0/24 right…“)
 
Zeile 1: Zeile 1:
=Strongswan=
+
=Openswan=
 
*cat /etc/ipsec.conf  
 
*cat /etc/ipsec.conf  
 
<pre>
 
<pre>
conn sophos-strongswan
+
version 2.0
      authby=secret
+
config setup
      left=192.168.245.111
+
    dumpdir=/var/run/pluto/
      leftsubnet=172.17.135.0/24
+
    nat_traversal=no
      right=192.168.242.81
+
    oe=off
      rightsubnet=10.2.2.0/24
+
    protostack=netkey
      ike=aes256-md5-modp1536
+
 
      esp=aes256-md5-modp1536
+
conn a2o
      auto=add
+
    authby=secret
 +
    left=192.168.252.200
 +
    leftid=@rome
 +
    leftsubnet=10.254.31.0/24
 +
    right=192.168.252.109
 +
    rightid=@loren
 +
    rightsubnet=10.254.33.0/24
 +
    ike=aes256-md5-modp1536
 +
    phase2alg=aes256-md5-1536
 +
    auto=start
 
</pre>
 
</pre>
 +
 
*cat /etc/ipsec.secrets
 
*cat /etc/ipsec.secrets
  #sophos        raspberry              password
+
  @loren @rome : PSK "suxer"
  192.168.242.81 192.168.245.111 : PSK "natuerliches mineralwasser"
+
 
 
=Sophos=
 
=Sophos=
 
=Sophos=
 
=Sophos=

Version vom 30. März 2017, 12:35 Uhr

Openswan

  • cat /etc/ipsec.conf
version 2.0
config setup
     dumpdir=/var/run/pluto/
     nat_traversal=no
     oe=off
     protostack=netkey

conn a2o
     authby=secret
     left=192.168.252.200
     leftid=@rome
     leftsubnet=10.254.31.0/24
     right=192.168.252.109
     rightid=@loren
     rightsubnet=10.254.33.0/24
     ike=aes256-md5-modp1536
     phase2alg=aes256-md5-1536
     auto=start
  • cat /etc/ipsec.secrets
@loren @rome  : PSK "suxer"

Sophos

Sophos

Remote Gateway einrichten

  • Site-to-Site-VPN
    • IPsec
      • Entferntes Gateway
        • Neues entferntes Gateway

Sophos-stongswan-psk1.png

IPsec-Verbindung einrichten

  • Site-to-Site-VPN
    • IPsec
      • Verbindungen
        • Neue IPsec-Verbindung

Sophos-stongswan-psk2.png

Die neuerstellte Verbindung

Sophos-stongswan-psk3.png