use left|rightauth notation in eap scenarios
This commit is contained in:
@@ -9,15 +9,15 @@ conn %default
|
|||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
authby=eap
|
|
||||||
|
|
||||||
conn home
|
conn home
|
||||||
left=PH_IP_CAROL
|
left=PH_IP_CAROL
|
||||||
leftnexthop=%direct
|
|
||||||
[email protected]
|
[email protected]
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
|
leftauth=eap
|
||||||
eap_identity=carol
|
eap_identity=carol
|
||||||
right=PH_IP_MOON
|
right=PH_IP_MOON
|
||||||
[email protected]
|
[email protected]
|
||||||
rightsubnet=10.1.0.0/16
|
rightsubnet=10.1.0.0/16
|
||||||
|
rightauth=pubkey
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -12,15 +12,16 @@ conn %default
|
|||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
|
||||||
conn rw-eap
|
conn rw-eap
|
||||||
authby=rsasig
|
|
||||||
eap=aka
|
|
||||||
eap_identity=%identity
|
|
||||||
left=PH_IP_MOON
|
left=PH_IP_MOON
|
||||||
leftsubnet=10.1.0.0/16
|
leftsubnet=10.1.0.0/16
|
||||||
[email protected]
|
[email protected]
|
||||||
leftcert=moonCert.pem
|
leftcert=moonCert.pem
|
||||||
|
leftauth=pubkey
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
|
right=%any
|
||||||
rightid=*@strongswan.org
|
rightid=*@strongswan.org
|
||||||
rightsendcert=never
|
rightsendcert=never
|
||||||
|
rightauth=eap-aka
|
||||||
|
eap_identity=%any
|
||||||
right=%any
|
right=%any
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -9,14 +9,15 @@ conn %default
|
|||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
authby=eap
|
|
||||||
|
|
||||||
conn home
|
conn home
|
||||||
left=PH_IP_CAROL
|
left=PH_IP_CAROL
|
||||||
leftnexthop=%direct
|
leftnexthop=%direct
|
||||||
[email protected]
|
[email protected]
|
||||||
|
leftauth=eap
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
right=PH_IP_MOON
|
right=PH_IP_MOON
|
||||||
[email protected]
|
[email protected]
|
||||||
rightsubnet=10.1.0.0/16
|
rightsubnet=10.1.0.0/16
|
||||||
|
rightauth=pubkey
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -12,14 +12,14 @@ conn %default
|
|||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
|
||||||
conn rw-eapaka
|
conn rw-eapaka
|
||||||
authby=rsasig
|
|
||||||
eap=aka
|
|
||||||
left=PH_IP_MOON
|
left=PH_IP_MOON
|
||||||
leftsubnet=10.1.0.0/16
|
leftsubnet=10.1.0.0/16
|
||||||
[email protected]
|
[email protected]
|
||||||
leftcert=moonCert.pem
|
leftcert=moonCert.pem
|
||||||
|
leftauth=pubkey
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
|
right=%any
|
||||||
rightid=*@strongswan.org
|
rightid=*@strongswan.org
|
||||||
rightsendcert=never
|
rightsendcert=never
|
||||||
right=%any
|
rightauth=eap-aka
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -9,14 +9,14 @@ conn %default
|
|||||||
rekeymargin=3m
|
rekeymargin=3m
|
||||||
keyingtries=1
|
keyingtries=1
|
||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
authby=eap
|
|
||||||
|
|
||||||
conn home
|
conn home
|
||||||
left=PH_IP_CAROL
|
left=PH_IP_CAROL
|
||||||
leftnexthop=%direct
|
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
|
leftauth=eap
|
||||||
eap_identity=carol
|
eap_identity=carol
|
||||||
right=PH_IP_MOON
|
right=PH_IP_MOON
|
||||||
|
rightauth=pubkey
|
||||||
[email protected]
|
[email protected]
|
||||||
rightsubnet=10.1.0.0/16
|
rightsubnet=10.1.0.0/16
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
@@ -12,15 +12,14 @@ conn %default
|
|||||||
keyexchange=ikev2
|
keyexchange=ikev2
|
||||||
|
|
||||||
conn rw-eap
|
conn rw-eap
|
||||||
authby=rsasig
|
|
||||||
eap=mschapv2
|
|
||||||
eap_identity=%identity
|
|
||||||
left=PH_IP_MOON
|
left=PH_IP_MOON
|
||||||
leftsubnet=10.1.0.0/16
|
leftsubnet=10.1.0.0/16
|
||||||
[email protected]
|
[email protected]
|
||||||
leftcert=moonCert.pem
|
leftcert=moonCert.pem
|
||||||
|
leftauth=pubkey
|
||||||
leftfirewall=yes
|
leftfirewall=yes
|
||||||
rightid=%any
|
|
||||||
rightsendcert=never
|
|
||||||
right=%any
|
right=%any
|
||||||
|
rightauth=eap-mschapv2
|
||||||
|
rightsendcert=never
|
||||||
|
eap_identity=%any
|
||||||
auto=add
|
auto=add
|
||||||
|
|||||||
Reference in New Issue
Block a user