Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
userdoc:tt_ipsec_vpn_strongswan [2016/12/08 09:07] droemel |
userdoc:tt_ipsec_vpn_strongswan [2020/12/04 13:59] abelbeck [IPsec VPN (strongSwan) Configuration] |
||
---|---|---|---|
Line 4: | Line 4: | ||
The web interface Network tab, "IPsec Peers" and "IPsec Mobile" | The web interface Network tab, "IPsec Peers" and "IPsec Mobile" | ||
+ | |||
+ | !!Note: | ||
Three key strongSwan features not found in ipsec-tools (racoon): | Three key strongSwan features not found in ipsec-tools (racoon): | ||
Line 50: | Line 52: | ||
\\ | \\ | ||
- | Tested with a AVM FRITZ!Box Fon WLAN 7390 with FRITZ!OS 06.51 and strongSwan 5.5.1 | + | Tested with a AVM FRITZ!Box Fon WLAN 7390 with FRITZ!OS 06.51 and strongSwan 5.5.1 (AstLinux 1.2.9-pre 64-bit) |
astlinux.example.tld: | astlinux.example.tld: | ||
Line 61: | Line 63: | ||
| | ||
config setup | config setup | ||
- | | + | # |
+ | | ||
conn %default | conn %default | ||
dpddelay=15 | dpddelay=15 | ||
Line 81: | Line 84: | ||
aggressive=yes | aggressive=yes | ||
authby=psk | authby=psk | ||
- | auto=start | + | |
+ | auto=route | ||
+ | keyingtries=%forever | ||
+ | !!Note:!! '' | ||
+ | |||
\\ | \\ | ||
**astlinux.example.tld: | **astlinux.example.tld: | ||
Line 89: | Line 96: | ||
| | ||
@astlinux.example.tld @fritzbox.example.tld : PSK monkey123 | @astlinux.example.tld @fritzbox.example.tld : PSK monkey123 | ||
- | | ||
- | The Fritzbox 7390 (FW 6.51) accepts up 128 characters as Pre-shared Key, which you can generate e.g. with: | ||
- | |||
- | openssl rand -base64 96 | ||
\\ | \\ | ||
Line 154: | Line 157: | ||
\\ | \\ | ||
+ | |||
+ | !!Note:!! The Fritzbox 7390 (FW 6.51) accepts Pre-shared-Keys with a length up 128 characters, which can be generated e.g. with: | ||
+ | |||
+ | openssl rand -base64 96 | ||
+ | \\ | ||
===== Network to Network with Pre-Shared Key ===== | ===== Network to Network with Pre-Shared Key ===== | ||