Difference between revisions of "FireBrick to Openswan Strongswan IPsec (Howto)"
From AAISP Support Site
[quality revision] | [quality revision] |
m |
m (→Linux (CentOS Openswan) Example Using IKE2 and Preshared keys) |
||
Line 32: | Line 32: | ||
Put the following in the FB at the other end: | Put the following in the FB at the other end: | ||
+ | <syntaxhighlight language="xml"> | ||
<connection name="IPSec" peer-ips=CentOS.IP.Address" auth-method="Secret" secret="YourSecretHere" internal-ipv4="FireBrick.LAN.IP.Address" routes="CentOS.IP.Address" log="default"/> | <connection name="IPSec" peer-ips=CentOS.IP.Address" auth-method="Secret" secret="YourSecretHere" internal-ipv4="FireBrick.LAN.IP.Address" routes="CentOS.IP.Address" log="default"/> | ||
− | + | </syntaxhighlight> | |
− | |||
− | |||
=strongSwan= | =strongSwan= |
Revision as of 15:06, 30 June 2015
yum install openswan
(strongswan is much nicer, but not in yum on centos5. On centos6, use strongswan)
In /etc/ipsec.conf uncomment
include /etc/ipsec.d/*.conf
Put following two files in /etc/ipsec.d/ :
myFireBrick.conf:
conn myFireBrick
authby=secret
auto=start
ikev2=insist
left=CentOS.IP.Address
leftid=CentOS.IP.Address
leftsubnet=CentOS.IP.Address/32
right=FireBrick.IP.Address
rightid=FireBrick.IP.Address
rightsubnet=FireBrick.LAN.SUBNET/24
in: myFireBrick.secrets:
CentOS.IP.Address FireBrick.IP.Address : PSK "YourSecretHere"
chkconfig ipsec on service ipsec start
Put the following in the FB at the other end:
<connection name="IPSec" peer-ips=CentOS.IP.Address" auth-method="Secret" secret="YourSecretHere" internal-ipv4="FireBrick.LAN.IP.Address" routes="CentOS.IP.Address" log="default"/>
strongSwan
file: /etc/ipsec.conf
conn myFireBrick authby=secret auto=start left=strongSwan.IP leftid=strongSwan.IP leftsubnet=strongSwan.IP right=FireBrick.IP rightid=FireBrick.IP rightsubnet=SUBNET.ON.FireBrick.LAN lifetime=2m
file: /etc/ipsec.secrets
strongSwan.IP FireBrick.IP : PSK "YourSecretHere"