doc:appunti:linux:sa:ipsec_strongswan
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
doc:appunti:linux:sa:ipsec_strongswan [2021/02/05 16:39] – [Configurazione Shorewall] niccolo | doc:appunti:linux:sa:ipsec_strongswan [2023/11/14 11:27] (current) – [File di configurazione] niccolo | ||
---|---|---|---|
Line 12: | Line 12: | ||
===== File di configurazione ===== | ===== File di configurazione ===== | ||
+ | |||
+ | Qesti gli indirizzi IP coinvolti: | ||
+ | |||
+ | * **Lato Left (host locale)** | ||
+ | * IP pubblico: **132.82.168.98** | ||
+ | * Classe IP privata: **172.17.48.96/ | ||
+ | * **Lato Right (host remoto)** | ||
+ | * IP pubblico: **134.191.21.5** | ||
+ | * Classe IP privata: **172.17.48.80/ | ||
**/ | **/ | ||
Line 44: | Line 53: | ||
authby=secret | authby=secret | ||
left=132.82.168.98 | left=132.82.168.98 | ||
- | leftsubnet=172.16.48.97/29 | + | leftsubnet=172.17.48.97/29 |
right=134.191.21.5 | right=134.191.21.5 | ||
- | rightsubnet=172.16.48.81/28 | + | rightsubnet=172.17.48.81/28 |
ike=aes256-sha256-modp1536 | ike=aes256-sha256-modp1536 | ||
esp=aes256-sha256-modp1536 | esp=aes256-sha256-modp1536 | ||
Line 56: | Line 65: | ||
dpdtimeout=120s | dpdtimeout=120s | ||
dpdaction=restart | dpdaction=restart | ||
+ | closeaction=restart | ||
+ | </ | ||
+ | |||
+ | L' | ||
+ | |||
+ | < | ||
+ | charon: 07[IKE] received DELETE for IKE_SA office1-office2[5] | ||
+ | charon: 07[IKE] deleting IKE_SA office1-office2[5] | ||
+ | between 132.82.168.98[213.182.68.98]...134.191.21.5[134.191.21.5] | ||
+ | ipsec[30830]: | ||
+ | ipsec[30830]: | ||
+ | between 132.82.168.98[213.182.68.98]...134.191.21.5[134.191.21.5] | ||
</ | </ | ||
Line 77: | Line 98: | ||
ACCEPT | ACCEPT | ||
</ | </ | ||
+ | |||
+ | **ATTENZIONE**: | ||
**/ | **/ | ||
Line 84: | Line 107: | ||
</ | </ | ||
+ | **/ | ||
+ | |||
+ | < | ||
+ | sec ipv4 | ||
+ | </ | ||
+ | |||
+ | **/ | ||
+ | |||
+ | < | ||
+ | sec eth0: | ||
+ | </ | ||
===== Abilitare e avviare il servizio ===== | ===== Abilitare e avviare il servizio ===== | ||
Line 152: | Line 186: | ||
office1-office2: | office1-office2: | ||
office1-office2: | office1-office2: | ||
- | office1-office2: | + | office1-office2: |
Security Associations (1 up, 0 connecting): | Security Associations (1 up, 0 connecting): | ||
office1-office2[1]: | office1-office2[1]: | ||
Line 160: | Line 194: | ||
office1-office2{1}: | office1-office2{1}: | ||
office1-office2{1}: | office1-office2{1}: | ||
- | office1-office2{1}: | + | office1-office2{1}: |
</ | </ | ||
doc/appunti/linux/sa/ipsec_strongswan.1612539574.txt.gz · Last modified: 2021/02/05 16:39 by niccolo