testing: Added swanctl/shunt-policies-nat-rw

2016-02-28 22:25:50 +01:00
parent 13891e2a4f
commit efefa0c6a1
12 changed files with 231 additions and 0 deletions
@@ -0,0 +1,11 @@
+# /etc/strongswan.conf - strongSwan configuration file
+
+charon {
+  load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown
+
+  start-scripts {
+    creds = /usr/local/sbin/swanctl --load-creds 
+    conns = /usr/local/sbin/swanctl --load-conns
+  } 
+  keep_alive = 5
+}
@@ -0,0 +1,40 @@
+connections {
+
+   nat-t {
+      remote_addrs = 192.168.0.2 
+      vips = 0.0.0.0
+
+      local {
+         auth = pubkey
+         certs = venusCert.pem
+         id = venus.strongswan.org
+      }
+      remote {
+         auth = pubkey
+         id = sun.strongswan.org 
+      }
+      children {
+         nat-t {
+            remote_ts = 0.0.0.0/0 
+
+            updown = /usr/local/libexec/ipsec/_updown iptables
+            esp_proposals = aes128gcm128-modp3072
+         }
+      }
+      version = 2
+      proposals = aes128-sha256-modp3072
+   }
+
+   local-net {
+
+      children {
+         local-net {
+            local_ts  = 10.1.0.0/16
+            remote_ts = 10.1.0.0/16
+
+            mode = pass
+            start_action = trap
+         }
+      }
+   }
+}