Strongswan-opnsense-dynamische-ip-psk

Opensense

Phase 1

Allgemein

Authentifizierung

Key and Certs

• tree /etc/ipsec.d/

/etc/ipsec.d/
├── aacerts
├── acerts
├── cacerts
│   └── ca.crt
├── certs
│   └── ubuntu.crt
├── crls
├── ocspcerts
├── policies
├── private
│   └── ubuntu.key
└── reqs

/etc/ipsec.secret

10.85.9.6 @opnsense : PSK 0sc3lzYWRt

/etc/ipsec.conf

conn vpn
   authby=secret
   keyexchange=ikev2
   left=10.85.9.6
   leftid = 10.85.9.6
   leftsubnet="192.168.1.1/32"
   leftauth = psk
   rightauth = psk
   right=%any
   rightid = @opnsense.lab.intra
   rightsubnet="192.168.0.1/32"
   ike=aes256-sha256-modp4096!
   esp=aes256-sha256-modp4096!
   ikelifetime=28800s
   lifetime=3600s
   auto=add