# IPSec

Last modified by Jean Franco on 2022/07/18 21:41
Export
Office Formats
Export as PDF Export as ODT Export as RTF
Other Formats

Select the pages to export:

select all/ none

Legend:
  Created Page
  Modified Extension Page
  Clean Extension Page

Export as HTML

Exemplo de config de IPSec StrongSwan:

ubnt@ubnt# show vpn ipsec
allow-access-to-local-interface disable
auto-firewall-nat-exclude enable
esp-group FOO1 {
compression disable
lifetime 43200
mode tunnel
pfs dh-group20
proposal 1 {
encryption aes256
hash sha256
}
}
ike-group FOO1 {
ikev2-reauth no
key-exchange ikev2
lifetime 7200
proposal 1 {
dh-group 20
encryption aes256
hash sha256
}
}
nat-traversal enable
site-to-site {
peer 62.X.X.X {
authentication {
id 178.X.X.X
mode pre-shared-secret
pre-shared-secret SECRET
}
connection-type initiate
description R
ike-group FOO1
ikev2-reauth inherit
local-address any
tunnel 1 {
allow-nat-networks disable
allow-public-networks enable
esp-group FOO1
local {
prefix 192.168.178.0/24
}
remote {
prefix 10.99.10.67/32
}
}
}
}
0
Tags:
Created by Jean Franco on 2022/07/18 21:41

- Comments (0)
- Attachments (0)
- History
- Information

# Applications

# Tips

If you're a new XWiki user, check out the Getting Started Guide.

Maila Networks
XWiki Debian 14.4.1