All pastes #776970 Raw Edit

Something

public text v1 · immutable
·published 2007-11-16 12:18 UTC
rendered paste body
# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.15.2.6 2006/10/19 03:49:46 paul Exp $

# This file:  /usr/local/share/doc/openswan/ipsec.conf-sample
#
# Manual:     ipsec.conf.5


version 2.0     # conforms to second version of ipsec.conf specification


# basic configuration
config setup
        interfaces=%defaultroute
        # NAT-TRAVERSAL support, see README.NAT-Traversal
        nat_traversal=yes

# Add connections here

conn %default

conn deepakrsa
        left=10.10.136.94
        leftsubnet=192.168.1.0/255.255.255.0
        leftnexthop=%defaultroute
        leftrsasigkey=0sAQOg7ivVEM/HYxAEb9YQqYMiIzXuCihG7LQT8PODFJV6q1OEOpwEIAobcT1klp+WNz/NRFYGlOBXPzKVsTTztw8f
        leftid=@first
        right=10.10.136.96
        rightsubnet=200.0.0.0/255.0.0.0
        rightrsasigkey=0sAQNfeVs3yxTOzIkNs/0IXu4RJS9SV+NMpe6CJAP2Ui8h4tGpo9idmVMIfxe+W9fg9h/oGSowrE+OBdeAkQiyfMyD
        rightnexthop=%defaultroute
        rightid=@second
        authby=rsasig
        also=Deepak1126
        auto=start

conn Deepak1126
        keyexchange=ike
        aggrmode=no
        keyingtries=2
        ike=3des-md5-modp768
        ikelifetime=2h
        esp=3des-md5
        compress=yes
        keylife=2h
        pfs=yes
        pfsgroup=modp768
        failureshunt=passthrough


#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf