Linux IPSec initial

2024-08-01 21:37:56 +03:00 · 2024-08-01 21:37:56 +03:00 · b0b185027e
commit b0b185027e
parent 90912f9231
15 changed files with 313 additions and 10 deletions
--- a/client/server_scripts/ipsec/template.conf
+++ b/client/server_scripts/ipsec/template.conf
@ -0,0 +1,30 @@
+config setup
+    charondebug="ike 1, knl 1, cfg 0"
+    uniqueids=no
+
+conn ikev2-vpn
+    auto=add
+    compress=no
+    type=tunnel
+    keyexchange=ikev2
+    fragmentation=yes
+    forceencaps=yes 
+    dpdaction=clear
+    dpddelay=300s
+    rekey=no 
+    left=%any
+    leftid=$CLIENT_NAME
+    leftcert=$CLIENT_NAME.crt
+    leftsendcert=always
+    leftsubnet=0.0.0.0/0 
+    right=%any
+    rightid=%any
+    rightauth=rsa
+    rightsourceip=$IPSEC_VPN_L2TP_NET
+    rightdns=$PRIMARY_DNS,$SECONDARY_DNS
+    rightsendcert=never 
+    eap_identity=%identity 
+    ike=aes256-sha1-modp1024,aes128-sha1-modp1024
+    esp=aes256-sha1,aes256-sha2_512
+
+