Strongswan zu strongswan

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen

Config is the same on both sites

ipsec.conf

conn s2s
     authby=secret
     keyexchange=ikev1
     left=10.82.227.12
     leftsubnet=10.82.243.0/24
     mobike=no
     right=10.82.227.22
     rightsubnet=10.82.244.0/24
     ike=aes256-sha256-modp4096
     esp=aes256-sha256-modp4096
     auto=start

ipsec.secrets

10.82.227.12 10.82.227.22  : PSK "suxer"

Handling

Up

  • ipsec up s2s

Down

  • ipsec down s2s