FireBrick Road Warrior strongSwan: Difference between revisions

conn username # Arbitrary name - doesn't have to be username

left=%defaultroute # Use your default route to the internet

leftfirewall=yes # Yes as you may be behind firewall/NAT

leftauth=eap-mschapv2 # Match the EAP method defined on FireBrick

leftid=@peer-ID # Peer ID as defined in FB IPsec IKE setting

leftsourceip=%config # Ask for an IP from the roaming pool

eap_identity=username # Username as in ipsec.secrets and FB config

right=hostname.example.com # Hostname/IP of FireBrick

rightauth=pubkey # FireBrick should be set to auth-method Certificate

auto=start # Try to connect immediately on startup