Added swanctl/rw-psk-fqdn and swanctl/rw-psk-ipv4 scenarios

This commit is contained in:
Andreas Steffen
2014-06-14 15:40:23 +02:00
parent 3eb22f1f00
commit 39d6469d76
22 changed files with 441 additions and 0 deletions
@@ -0,0 +1,13 @@
# /etc/strongswan.conf - strongSwan configuration file
swanctl {
load = pem pkcs1 x509 revocation constraints pubkey openssl random
}
charon {
load = sha1 sha2 md5 aes des hmac gmp random nonce kernel-netlink socket-default updown vici
}
libstrongswan {
dh_exponent_ansi_x9_42 = no
}
@@ -0,0 +1,40 @@
connections {
home {
local_addrs = 192.168.0.100
remote_addrs = 192.168.0.1
local {
auth = psk
id = 192.168.0.100
}
remote {
auth = psk
id = 192.168.0.1
}
children {
home {
remote_ts = 10.1.0.0/16
start_action = none
updown = /usr/local/libexec/ipsec/_updown iptables
rekey_time = 10m
esp_proposals = aes128gcm128-modp2048
}
}
version = 2
reauth_time = 60m
rekey_time = 20m
proposals = aes128-sha256-modp2048
}
}
secrets {
ike-moon {
id = 192.168.0.1
secret = 0sFpZAZqEN6Ti9sqt4ZP5EWcqx
}
}
@@ -0,0 +1,13 @@
# /etc/strongswan.conf - strongSwan configuration file
swanctl {
load = pem pkcs1 x509 revocation constraints pubkey openssl random
}
charon {
load = sha1 sha2 md5 aes des hmac gmp random nonce kernel-netlink socket-default updown vici
}
libstrongswan {
dh_exponent_ansi_x9_42 = no
}
@@ -0,0 +1,39 @@
connections {
home {
local_addrs = 192.168.0.200
remote_addrs = 192.168.0.1
local {
auth = psk
id = 192.168.0.200
}
remote {
auth = psk
id = 192.168.0.1
}
children {
home {
remote_ts = 10.1.0.0/16
start_action = none
updown = /usr/local/libexec/ipsec/_updown iptables
rekey_time = 10m
esp_proposals = aes128gcm128-modp2048
}
}
version = 2
reauth_time = 60m
rekey_time = 20m
proposals = aes128-sha256-modp2048
}
}
secrets {
ike-moon {
id = 192.168.0.1
secret = 0sjVzONCF02ncsgiSlmIXeqhGN
}
}
@@ -0,0 +1,13 @@
# /etc/strongswan.conf - strongSwan configuration file
swanctl {
load = pem pkcs1 x509 revocation constraints pubkey openssl random
}
charon {
load = sha1 sha2 md5 aes des hmac gmp random nonce kernel-netlink socket-default updown vici
}
libstrongswan {
dh_exponent_ansi_x9_42 = no
}
@@ -0,0 +1,40 @@
connections {
rw {
local_addrs = 192.168.0.1
local {
auth = psk
}
remote {
auth = psk
}
children {
net {
local_ts = 10.1.0.0/16
start_action = none
updown = /usr/local/libexec/ipsec/_updown iptables
rekey_time = 10m
esp_proposals = aes128gcm128-modp2048
}
}
version = 2
reauth_time = 60m
rekey_time = 20m
proposals = aes128-sha256-modp2048
}
}
secrets {
ike-carol {
id = 192.168.0.100
secret = 0sFpZAZqEN6Ti9sqt4ZP5EWcqx
}
ike-dave {
id = 192.168.0.200
secret = 0sjVzONCF02ncsgiSlmIXeqhGN
}
}