| Expand |
|---|
|
В файл /etc/strongswan/ipsec.conf прописати:
conn lifecell
keyexchange=ikev1
left=1.2.3.4 # your outside IP
leftsubnet=172.30.255.60/30 # private network provided by lifecell
right=212.58.161.164
rightsubnet=212.58.162.208/32
ike=aes128-sha1-modp1024!
ikelifetime=24h
esp=aes128-sha1!
keyingtries=0
lifetime=8h
dpddelay=30
dpdtimeout=120
dpdaction=restart
authby=secret
auto=start
type=tunnel
conn lifecell1
also=lifecell
rightsubnet=212.58.162.209/32
auto=start
conn lifecell2
also=lifecell
rightsubnet=212.58.162.210/32
auto=start
В файл /etc/strongswan/ipsec.secrets прописати:
1.2.3.4 212.58.161.164 : PSK "_pre_shared_key_" |
...