Strongswan-opnsense-dynamische-ip-cert

Opensense

Phase 1

Allgemein

Authentifizierung

Strongswan

/etc/ipsec.secret

: RSA ubuntu.key ""

/etc/ipsec.conf

conn vpn
   authby=rsasig
   keyexchange=ikev2
   left=10.85.9.6
   leftcert=ubuntu.crt
   leftid="CN=ubuntu"
   leftsubnet="192.168.1.1/32"
   leftauth=pubkey
   rightauth=pubkey
   right=%any
   rightid="CN=opnsense"
   rightsubnet="192.168.0.1/32"
   rightca = "/CN=ca/"
   ike=aes256-sha256-modp4096!
   esp=aes256-sha256-modp4096!
   ikelifetime=28800s
   lifetime=3600s
   auto=add