使用strongswan搭建ipsec隧道

1

yum install -y strongswan

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

conn atou
 left=172.30.1.140
 leftsubnet=172.30.0.1/23
 right=对端公网ip
 rightsubnet=10.23.40.0/24
 leftid=ali
 rightid=ucloud
 esp=3des-sha
 type=tunnel
 leftauth=psk
 rightauth=psk
 keyexchange=ikev2
 auto=start

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

conn utoa
 left=10.23.40.38
 leftsubnet=10.23.40.0/24
 right=对端公网ip
 rightsubnet=172.30.0.1/23
 leftid=ucloud
 rightid=ali
 esp=3des-sha
 type=tunnel
 leftauth=psk
 rightauth=psk
 keyexchange=ikev2
 auto=start

1

ucloud ali : PSK "123@123"