Strongswan zu strongswan aggressive modus: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
(Die Seite wurde neu angelegt: „=Config on both sites= Add thin entry */etc/strongswan.conf <pre> charon { i_dont_care_about_security_and_use_aggressive_mode_psk = yes ... <…“)
 
 
(7 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
−
=Config on both sites=
+
=Config on server=
 
Add thin entry
 
Add thin entry
 
*/etc/strongswan.conf
 
*/etc/strongswan.conf
Zeile 6: Zeile 6:
 
         i_dont_care_about_security_and_use_aggressive_mode_psk = yes
 
         i_dont_care_about_security_and_use_aggressive_mode_psk = yes
 
         ...  
 
         ...  
 +
}
 +
</pre>
 +
*/etc/ipsec.conf
 +
<pre>
 +
conn s2s
 +
    authby=secret
 +
    keyexchange=ikev1
 +
    aggressive = yes
 +
    left=10.84.252.32
 +
    leftsubnet=10.83.32.0/24
 +
    right=%any
 +
    rightsubnet=10.83.33.0/24
 +
    ike=aes128-sha1-modp1024
 +
    esp=aes128-sha1-modp1024
 +
    auto=start
 +
</pre>
 +
*/etc/ipsec.secrets
 +
<pre>
 +
10.84.252.32 %any : PSK "tina"
 +
</pre>
 +
 +
=Config on client=
 +
Add thin entry
 +
*/etc/strongswan.conf
 +
<pre>
 +
charon {
 +
        i_dont_care_about_security_and_use_aggressive_mode_psk = yes
 +
        ...
 +
}
 +
</pre>
 +
*/etc/ipsec.conf
 +
<pre>
 +
conn s2s
 +
    authby=secret
 +
    keyexchange=ikev1
 +
    aggressive = yes
 +
    left=10.84.252.32
 +
    leftsubnet=10.83.32.0/24
 +
    right=10.84.252.33
 +
    rightsubnet=10.83.33.0/24
 +
    ike=aes128-sha1-modp1024
 +
    esp=aes128-sha1-modp1024
 +
    auto=start
 +
</pre>
 +
*/etc/ipsec.secrets
 +
<pre>
 +
10.84.252.32 %any : PSK "tina"
 
</pre>
 
</pre>

Aktuelle Version vom 9. November 2017, 10:04 Uhr

Config on server

Add thin entry

  • /etc/strongswan.conf
 charon {
        i_dont_care_about_security_and_use_aggressive_mode_psk = yes
        ... 
}
  • /etc/ipsec.conf
conn s2s
     authby=secret
     keyexchange=ikev1
     aggressive = yes
     left=10.84.252.32
     leftsubnet=10.83.32.0/24
     right=%any
     rightsubnet=10.83.33.0/24
     ike=aes128-sha1-modp1024
     esp=aes128-sha1-modp1024
     auto=start
  • /etc/ipsec.secrets
10.84.252.32 %any : PSK "tina"

Config on client

Add thin entry

  • /etc/strongswan.conf
 charon {
        i_dont_care_about_security_and_use_aggressive_mode_psk = yes
        ... 
}
  • /etc/ipsec.conf
conn s2s
     authby=secret
     keyexchange=ikev1
     aggressive = yes
     left=10.84.252.32
     leftsubnet=10.83.32.0/24
     right=10.84.252.33
     rightsubnet=10.83.33.0/24
     ike=aes128-sha1-modp1024
     esp=aes128-sha1-modp1024
     auto=start
  • /etc/ipsec.secrets
10.84.252.32 %any : PSK "tina"
Abgerufen von „http://wiki.ixheim.de/index.php?title=Strongswan_zu_strongswan_aggressive_modus&oldid=15268“