FireBrick Road Warrior strongSwan: Difference between revisions
Content deleted Content added
| Line 21: | Line 21: | ||
<syntaxhighlight lang="bash"> |
<syntaxhighlight lang="bash"> |
||
conn username # Arbitrary name - doesn't have to be username |
conn username # Arbitrary name - doesn't have to be username |
||
left=%defaultroute # Use your default route to the internet |
left=%defaultroute # Use your default route to the internet |
||
leftfirewall=yes # Yes as you may be behind firewall/NAT |
leftfirewall=yes # Yes as you may be behind firewall/NAT |
||
leftauth=eap-mschapv2 # Match the EAP method defined on FireBrick |
leftauth=eap-mschapv2 # Match the EAP method defined on FireBrick |
||
leftid=@peer-ID # Peer ID as defined in FB IPsec IKE setting |
leftid=@peer-ID # Peer ID as defined in FB IPsec IKE setting |
||
leftsourceip=%config # Ask for an IP from the roaming pool |
leftsourceip=%config # Ask for an IP from the roaming pool |
||
eap_identity=username # Username as in ipsec.secrets and FB config |
eap_identity=username # Username as in ipsec.secrets and FB config |
||
right=hostname.example.com # Hostname/IP of FireBrick |
right=hostname.example.com # Hostname/IP of FireBrick |
||
rightauth=pubkey # FireBrick should be set to auth-method Certificate |
rightauth=pubkey # FireBrick should be set to auth-method Certificate |
||
rightid=@hostname.example.com # ID of FireBrick |
rightid=@hostname.example.com # ID of FireBrick |
||
auto=start # Try to connect immediately on startup |
auto=start # Try to connect immediately on startup |
||
</syntaxhighlight> |
</syntaxhighlight> |
||