Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

IPsec OpenBSD: Difference between revisions

Content deleted Content added
AA-Paul (talk | contribs)
Reedy (talk | contribs)
m fix lang
 
(5 intermediate revisions by 2 users not shown)
Line 1: Line 1:
<indicator name="Tunnels">[[File:Menu-IPsec.svg|link=:Category:FireBrick_IPsec|30px|Back up to the FireBrick IPsec Tunnels Category Page]]</indicator>
<indicator name="Tunnels">[[File:Menu-IPsec.svg|link=:Category:FireBrick IPsec|30px|Back up to the FireBrick IPsec Tunnels Category Page]]</indicator>


== Overview and requirements ==
== Overview and requirements ==
Line 12: Line 12:
* 198.51.100.0/24 LAN of machines behind FireBrick
* 198.51.100.0/24 LAN of machines behind FireBrick
* 203.0.113.0/24 LAN of machines behind OpenBSD
* 203.0.113.0/24 LAN of machines behind OpenBSD



== FireBrick configuration ==
== FireBrick configuration ==


<SyntaxHighlight lang="xml">
<code>
<ipsec-ike allow="192.0.2.2">
<ipsec-ike allow="192.0.2.2">
<connection name="openbsdtest" local-ip="192.0.2.1" peer-ips="192.0.2.2" graph="openbsd ipsec"
<connection name="openbsdtest" local-ip="192.0.2.1" peer-ips="192.0.2.2" graph="openbsd ipsec"
Line 22: Line 21:
peer-ID="192.0.2.2" auth-method="Secret" secret="your PSK here"/>
peer-ID="192.0.2.2" auth-method="Secret" secret="your PSK here"/>
</ipsec-ike>
</ipsec-ike>
</SyntaxHighlight>
</code>


== OpenBSD configuration ==
== OpenBSD configuration ==


/etc/iked.conf :
/etc/iked.conf :


<SyntaxHighlight lang="aconf">
<code>
ikev2 "tofirebrick" active \
ikev2 "tofirebrick" active \
esp \
esp \
Line 36: Line 35:
srcid 192.0.2.2 dstid 192.0.2.1 \
srcid 192.0.2.2 dstid 192.0.2.1 \
psk "your PSK here"
psk "your PSK here"
</SyntaxHighlight>
</code>


[[Category:FireBrick_IPsec|OpenBSD]]
[[Category:FireBrick IPsec|OpenBSD]]