Strongswan zu strongswan

net-net-ikev2-x509

huey

!/etc/ipsec.conf

conn net-net
    left=%defaultroute
    leftsubnet=10.18.44.0/24
    leftcert=huey.xinux.org.crt
    right=192.168.242.249
    rightsubnet=10.4.3.0/16
    rightid="C=de, ST=rlp, L=zweibruecken, O=xinux, OU=edv, CN=franz.xinux.org, E=technik@xinux.de"
    auto=start

!/etc/ipsec.secrets

: RSA franz.xinux.org.key ""

!/etc/ipsec.conf

franz

conn net-net
    left=%defaultroute
    leftsubnet=10.4.3.0/16
    leftcert=franz.xinux.org.crt
    right=192.168.244.151
    rightsubnet=10.18.44.0/24
    rightid="C=de, ST=rlp, L=zweibruecken, O=xinux, OU=edv, CN=huey.xinux.org, E=technik@xinux.de"
    auto=start

!/etc/ipsec.secrets

: RSA franz.xinux.org.key ""