Updated swanctl/rw-psk-ikev1 scenario

This commit is contained in:
Andreas Steffen
2016-03-10 13:59:37 +01:00
parent 1d86d1d65a
commit 90ef7e8af6
5 changed files with 36 additions and 28 deletions
@@ -6,7 +6,6 @@ connections {
local {
auth = psk
id = moon1.strongswan.org
}
remote {
auth = psk
@@ -25,18 +24,17 @@ connections {
rw-2 {
local_addrs = 192.168.0.1
remote_addrs = 192.168.0.192/28
remote_addrs = 192.168.0.150-192.168.0.200
local {
auth = psk
id = moon2.strongswan.org
}
remote {
auth = psk
}
children {
net-2 {
local_ts = 10.1.0.16/28
local_ts = 10.1.0.17-10.1.0.20
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes192gcm128-modp3072
@@ -50,12 +48,20 @@ connections {
secrets {
ike-moon1 {
id = moon1.strongswan.org
ike-any {
id = 0.0.0.0/0 0::0/0
secret = 0soBAJZLI7Bwwi61Rl113FqD/3
}
ike-rw-1 {
id = 192.168.0.96/28
secret = 0sFpZAZqEN6Ti9sqt4ZP5EWcqx
}
ike-moon2 {
id = moon2.strongswan.org
ike-rw-2 {
id = 192.168.0.150-192.168.0.200
secret = 0s8qPdxyhDeGfk1l211cS8urXc
}
ike-dave {
id = 192.168.0.200
secret = 0sjVzONCF02ncsgiSlmIXeqhGN
}
}