updated ikev1/xauth-psk-mode-config scenario to support xauth plugin

2010-05-18 22:56:42 +02:00
parent 17adc8d074
commit 1fe5d973cb
11 changed files with 16 additions and 21 deletions
@@ -21,4 +21,5 @@ conn home
 	right=PH_IP_MOON
 	[email protected]
 	rightsubnet=10.1.0.0/16
+	xauth_identity=carol
 	auto=add
@@ -6,4 +6,4 @@ [email protected] @moon.strongswan.org : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21

 [email protected] @sun.strongswan.org :  PSK 0sR64pR6y0S5d6d8rNhUIM7aPbdjND4st5

-: XAUTH carol "4iChxLT3" 
+carol : XAUTH "4iChxLT3" 
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random
+  load = sha1 sha2 md5 aes des hmac gmp random xauth
 }

 # pluto uses optimized DH exponent sizes (RFC 3526)
@@ -21,4 +21,5 @@ conn home
 	right=PH_IP_MOON
 	[email protected]
 	rightsubnet=10.1.0.0/16
+	xauth_identity=dave
 	auto=add
@@ -2,4 +2,4 @@

 : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL

-: XAUTH dave "ryftzG4A" 
+dave : XAUTH "ryftzG4A" 
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random
+  load = sha1 sha2 md5 aes des hmac gmp random xauth
 }

 # pluto uses optimized DH exponent sizes (RFC 3526)
@@ -13,17 +13,12 @@ conn %default
 	keyingtries=1
 	authby=xauthpsk
 	xauth=server
+
+conn rw
 	left=PH_IP_MOON
 	[email protected]
 	leftsubnet=10.1.0.0/16
 	leftfirewall=yes
 	right=%any
+	rightsourceip=10.3.0.0/24
 	auto=add
-
-conn carol
-	[email protected]
-	rightsourceip=PH_IP_CAROL1
-
-conn dave
-	[email protected]
-	rightsourceip=PH_IP_DAVE1
@@ -2,6 +2,6 @@

@moon.strongswan.org : PSK 0sv+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL

-: XAUTH carol "4iChxLT3"
+carol : XAUTH "4iChxLT3"

-: XAUTH dave  "ryftzG4A"
+dave  : XAUTH "ryftzG4A"
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 pluto {
-  load = sha1 sha2 md5 aes des hmac gmp random
+  load = sha1 sha2 md5 aes des hmac gmp random xauth
 }

 # pluto uses optimized DH exponent sizes (RFC 3526)