original files of m241
This commit is contained in:
@@ -0,0 +1,48 @@
|
||||
# Update #INITIATOR to the ip address of the initiator system
|
||||
# Update #RESPONDER to the ip address of the responder system
|
||||
# Update #AUTHENTICATION_METHOD with the authentication method,
|
||||
# pre_shared_key, rsa_signature or dss_signature.
|
||||
# Update #CERTIFICATE to the file name of the certificiate used for
|
||||
# authentication_method rsa_signature or dss_signature.
|
||||
# Update #PRIVATE_KEY to the file name of the private key used for
|
||||
# authentication_method rsa_signature or dss_signature.
|
||||
|
||||
general {
|
||||
listen #RESPONDER;
|
||||
exchange_max_time 30;
|
||||
spi_min 100000;
|
||||
spi_max 199999;
|
||||
}
|
||||
ike_sa address #INITIATOR {
|
||||
ike_id default;
|
||||
exchange_version 1,2;
|
||||
passive on;
|
||||
liveness 0;
|
||||
initial_contact off;
|
||||
lifetime 8 hours;
|
||||
authentication {
|
||||
method #AUTHENTICATION_METHOD;
|
||||
shared_key this_should_be_secret;
|
||||
certificate #CERTIFICATE;
|
||||
private_key #PRIVATE_KEY;
|
||||
private_key_password 1111;
|
||||
trusted_ca_store trusted;
|
||||
intermediate_ca_store intermediate;
|
||||
}
|
||||
proposal {
|
||||
dh_group 2,1;
|
||||
hash_algorithm sha1,md5;
|
||||
encryption_algorithm 3des,des;
|
||||
integrity_algorithm sha1,md5;
|
||||
}
|
||||
}
|
||||
ipsec_sa address #RESPONDER address #INITIATOR {
|
||||
ike_id default;
|
||||
encapsulation_mode tunnel;
|
||||
lifetime 3600 seconds;
|
||||
proposal {
|
||||
dh_group 2,1;
|
||||
encryption_algorithm 3des,des;
|
||||
integrity_algorithm sha1,md5;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user