ini StrongSwan公路战士配置

Posted 2021-05-24

config setup
  charondebug="ike 2, knl 2, cfg 2 net 2"
  uniqueids=never

#Road warriror base
conn rw-base
  dpdaction=clear
  dpdtimeout=90s
  dpddelay=30s

# connection for win 7 client
conn rw-config
  also=rw-base
  #compress=no
  right=%any
  rightsubnet=172.16.252.0/24
  rightsourceip=172.16.252.0/24
  rightdns=8.8.8.8,8.8.4.4
  rightsendcert=never

  left=%defaultroute
  leftsubnet=0.0.0.0/0
  leftid=@<your-host-name-here>
  leftcert=/usr/local/etc/ipsec.d/certs/vpn-server-cert.pem

  keyexchange=ikev2
  ike=aes256-sha1-modp1024,3des-sha1-modp1024!
  esp=aes256-sha1,3des-sha1!
  rightauth=eap-mschapv2
  reauth=no
  rekey=no
  #leftsendcert=always
  #rightca=""
  #
conn win7
  also=rw-config
  keyexchange=ikev2
  #rightauth=eap-dynamic
  eap_identity=%identity
  #rightsendcert=never
  auto=add