implemented PASS and DROP shunt policies

2011-06-28 19:42:54 +02:00
parent 6a5c8ee7a5
commit f87991704e
38 changed files with 1230 additions and 27 deletions
@@ -0,0 +1,43 @@
+# /etc/ipsec.conf - strongSwan IPsec configuration file
+
+config setup
+        crlcheckinterval=180
+	strictcrlpolicy=no
+	plutostart=no
+
+conn %default
+	ikelifetime=60m
+	keylife=20m
+	rekeymargin=3m
+	keyingtries=1
+	keyexchange=ikev2
+	mobike=no
+
+conn local-net
+	leftsubnet=10.1.0.0/16
+	rightsubnet=10.1.0.0/16
+	authby=never
+	type=pass
+	auto=route
+
+conn venus-icmp
+	leftsubnet=10.1.0.20/32
+	rightsubnet=0.0.0.0/0
+	leftprotoport=icmp
+	rightprotoport=icmp
+	leftauth=any
+	rightauth=any	
+	type=drop
+	auto=route
+
+conn net-net 
+	left=PH_IP_MOON
+	leftcert=moonCert.pem
+	[email protected]
+	leftsubnet=10.1.0.0/16
+	leftfirewall=yes
+	lefthostaccess=yes
+	right=PH_IP_SUN
+	[email protected]
+	rightsubnet=0.0.0.0/0
+	auto=add