1
Download GW2020 Series User Manual
Transcript
22: Configuring IPSec _______________________________________________________________________________________________________ uci set strongswan.@connection[1].type=pass uci set strongswan.@connection[1].auto=route uci commit This will create the following output: config connection option name 'local' option enabled 'yes' option locallan '10.1.1.1' option locallanmask '255.255.255.255' option remotelan '10.1.1.0' option remotelanmask '255.255.255.0' option type 'pass' option auto 'route' Traffic originated on remotelan and destined to locallan address is excluded from VPN IPSec policy. 22.3.4 Secret settings Each tunnel also requires settings for how the local end point of the tunnel proves its identity to the remote end point. A sample secret section which could be used with the connection section in ‘Connection Settings’ is shown below. # Commands to add a secret for psk auth touch /etc/config/strongswan uci add strongswan secret uci set strongswan.@secret[0].enabled=yes uci set strongswan.@secret[0].localaddress=192.168.209.1 uci set strongswan.@secret[0].remoteaddress= 100.100.100.100 uci set strongswan.@secret[0].secrettype=psk uci set strongswan.@secret[0].secret=secret uci commit This will create the following output: _______________________________________________________________________________________________________ © Virtual Access 2015 GW2020 Series User Manual Issue: 1.1 Page 190 of 317
