Strongswan-opnsense-dynamische-ip-psk: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(Die Seite wurde neu angelegt: „=Opensense= ==Phase 1== ===Allgemein=== Datei:Strongswan-opnsens-dynamische-ip-psk-1.png ===Authentifizierung=== Datei:Strongswan-opnsens-dynamische-ip-p…“) |
|||
| Zeile 24: | Zeile 24: | ||
</pre> | </pre> | ||
==/etc/ipsec.secret== | ==/etc/ipsec.secret== | ||
| − | : | + | 10.85.9.6 @opnsense : PSK 0sc3lzYWRt |
==/etc/ipsec.conf== | ==/etc/ipsec.conf== | ||
<pre> | <pre> | ||
conn vpn | conn vpn | ||
| − | authby= | + | authby=secret |
keyexchange=ikev2 | keyexchange=ikev2 | ||
left=10.85.9.6 | left=10.85.9.6 | ||
| − | + | leftid = 10.85.9.6 | |
| − | |||
leftsubnet="192.168.1.1/32" | leftsubnet="192.168.1.1/32" | ||
| − | leftauth= | + | leftauth = psk |
| − | rightauth= | + | rightauth = psk |
right=%any | right=%any | ||
| − | rightid= | + | rightid = @opnsense.lab.intra |
rightsubnet="192.168.0.1/32" | rightsubnet="192.168.0.1/32" | ||
| − | |||
ike=aes256-sha256-modp4096! | ike=aes256-sha256-modp4096! | ||
esp=aes256-sha256-modp4096! | esp=aes256-sha256-modp4096! | ||
Version vom 1. Juli 2022, 15:19 Uhr
Opensense
Phase 1
Allgemein
Authentifizierung
Strongswan
Key and Certs
- tree /etc/ipsec.d/
/etc/ipsec.d/ ├── aacerts ├── acerts ├── cacerts │ └── ca.crt ├── certs │ └── ubuntu.crt ├── crls ├── ocspcerts ├── policies ├── private │ └── ubuntu.key └── reqs
/etc/ipsec.secret
10.85.9.6 @opnsense : PSK 0sc3lzYWRt
/etc/ipsec.conf
conn vpn authby=secret keyexchange=ikev2 left=10.85.9.6 leftid = 10.85.9.6 leftsubnet="192.168.1.1/32" leftauth = psk rightauth = psk right=%any rightid = @opnsense.lab.intra rightsubnet="192.168.0.1/32" ike=aes256-sha256-modp4096! esp=aes256-sha256-modp4096! ikelifetime=28800s lifetime=3600s auto=add