SukuDokuWiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

<code>
aptitude install racoon ipsec-tools
</code>

<code>
# cat /etc/ipsec-tools.conf

#!/usr/sbin/setkey -f
flush;
spdflush;

spdadd 192.168.100.0/24 192.168.110.0/24 any -P out ipsec esp/tunnel/93.125.3.114-92.241.102.234/require;
spdadd 192.168.110.0/24 192.168.100.0/24 any -P in ipsec  esp/tunnel/92.241.102.234-93.125.3.114/require;
</code>

<code>
# cat /etc/racoon/racoon.conf
path pre_shared_key "/etc/racoon/psk.txt";
remote  anonymous
{
    exchange_mode main;
    passive on;
    proposal {
        encryption_algorithm des;
        hash_algorithm md5;
        authentication_method pre_shared_key;
        dh_group 2 ;
    }
}

sainfo anonymous
{
    pfs_group 2;
    encryption_algorithm des;
    authentication_algorithm hmac_md5;
    compression_algorithm deflate;
}

# cat /etc/racoon/psk.txt
92.241.102.234 mysecrethere
</code>

в rc.local:
<code>
setkey -f /etc/ipsec-tools.conf
</code>

SukuDokuWiki

User Tools

Site Tools

Page Tools