|
First please compile Linux's kernel to support FreeS/WAN and
install FreeS/WAN in the Linux box. Please refer to the following
URL for more information:http://www.freeswan.org/
Two files must be configured in the /etc directory.
ipsec.conf:
config setup
interfaces="ipsec0=eth1"
klipsdebug=none
plutodebug=none
plutoload=%search
plutostart=%search
conn %default
keyingtries=3
conn vigor
left=210.243.151.181
leftsubnet=192.168.2.0/24
leftnexthop=210.243.151.190
right=203.69.175.28
rightsubnet=192.168.1.0/24
rightnexthop=203.69.175.30
auto=no
pfs=no
authby=secret
ipsec.secrets:
210.243.151.181 203.69.175.28 : PSK "123" |
|