FireBrick to Openswan Strongswan IPsec (Howto): Difference between revisions

FireBrick to Openswan Strongswan IPsec (Howto) (view source)

Revision as of 23:58, 17 August 2018

499 bytes added , 17 August 2018

clean up

Reedy

editor

698

edits

Revision as of 15:03, 30 June 2015 (view source) AA-Andrew (talk \| contribs) mNo edit summary ← Older edit		Revision as of 23:58, 17 August 2018 (view source) Reedy (talk \| contribs) (clean up) Newer edit →
(14 intermediate revisions by 2 users not shown)
<indicator name="~~FireBrick~~ Tunnels">[[File:~~FBimgtunnel~~Menu-IPsec.svg\|link=:Category:~~FireBrick_Tunnels~~FireBrick IPsec\|30px\|Back up to the FireBrick IPsec Tunnels Category Page]]</indicator> *Also see: [[FireBrick Road Warrior strongSwan]] =Linux (CentOS Openswan) Example Using IKE2 and Preshared keys= Put following two files in /etc/ipsec.d/ : file: myFireBrick.conf: <syntaxhighlight lang="bash"> conn myFireBrick authby=secret rightid=FireBrick.IP.Address rightsubnet=FireBrick.LAN.SUBNET/24 </syntaxhighlight> infile: myFireBrick.secrets: CentOS.IP.Address FireBrick.IP.Address : PSK "YourSecretHere" Put the following in the FB at the other end: <syntaxhighlight lang="xml"> <connection name="IPSec" peer-ips="CentOS.IP.Address" auth-method="Secret" secret="YourSecretHere" internal-ipv4="FireBrick.LAN.IP.Address/24" routes="CentOS.IP.Address" log="default"/> </syntaxhighlight> =strongSwan= file: /etc/ipsec.conf <syntaxhighlight lang="bash"> conn myFireBrick authby=secret right=FireBrick.IP rightid=FireBrick.IP rightsubnet=~~SUBNET.ON.~~FireBrick.LAN.IP.Address/24 lifetime=2m </syntaxhighlight> file: /etc/ipsec.secrets <syntaxhighlight lang="bash"> strongSwan.IP FireBrick.IP : PSK "YourSecretHere" </syntaxhighlight> <syntaxhighlight lang="xml"> <connection name="IPSecTostrongSwan" peer-ips="strongSwan.IP" auth-method="Secret" secret="YourSecretHere" internal-ipv4="FireBrick.LAN.IP.Address/24" routes="strongSwan.IP" log="default"/> ~~[[Category:FireBrick_Tunnels\|IPv6 Tunnels]]~~ </syntaxhighlight> [[Category:FireBrick IPsec\|Strongswan]]