FireBrick to Openswan Strongswan IPsec (Howto): Difference between revisions

← Older edit

FireBrick to Openswan Strongswan IPsec (Howto) (view source)

Revision as of 00:31, 4 July 2022

78 bytes added , 4 July 2022

→‎Linux (CentOS Openswan) Example Using IKE2 and Preshared keys: formatting

Reedy

editor

706

edits

Revision as of 19:42, 30 July 2015 (view source) AA-Andrew (talk \| contribs) mNo edit summary ← Older edit		Latest revision as of 00:31, 4 July 2022 (view source) Reedy (talk \| contribs) (→‎Linux (CentOS Openswan) Example Using IKE2 and Preshared keys: formatting)
(12 intermediate revisions by 2 users not shown)
<indicator name="Tunnels">[[File:Menu-IPsec.svg\|link=:Category:~~FireBrick_IPsec~~FireBrick IPsec\|30px\|Back up to the FireBrick IPsec Tunnels Category Page]]</indicator> See also: [[FireBrick Road Warrior strongSwan]] =Linux (CentOS Openswan) Example Using IKE2 and Preshared keys= (strongswan is much nicer, but not in yum on centos5. On centos6, use strongswan) In <tt>/etc/ipsec.conf</tt> uncomment include /etc/ipsec.d/*.conf Put following two files in <tt>/etc/ipsec.d/ </tt>: file: myFireBrick.conf: <syntaxhighlight lang="bash"> conn myFireBrick authby=secret Put the following in the FB at the other end: <syntaxhighlight ~~language~~lang="xml"> <connection name="IPSec" peer-ips="CentOS.IP.Address" auth-method="Secret" secret="YourSecretHere" ~~internal~~local-~~ipv4~~ip="FireBrick.LAN.IP.Address~~/24~~" routes="CentOS.IP.Address" log="default"/> </syntaxhighlight> file: /etc/ipsec.conf <syntaxhighlight ~~language~~lang="~~linux-config~~bash"> conn myFireBrick authby=secret auto=start file: /etc/ipsec.secrets <syntaxhighlight ~~language~~lang="~~linux-config~~bash"> strongSwan.IP FireBrick.IP : PSK "YourSecretHere" </syntaxhighlight> Put the following in the FB at the other end: <syntaxhighlight ~~language~~lang="xml"> <connection name="IPSecTostrongSwan" peer-ips="strongSwan.IP" auth-method="Secret" secret="YourSecretHere" ~~internal~~local-~~ipv4~~ip="FireBrick.LAN.IP.Address~~/24~~" routes="strongSwan.IP" log="default"/> </syntaxhighlight> [[Category:~~FireBrick_IPsec~~FireBrick IPsec\|Strongswan]]