49 lines
1.4 KiB
INI
49 lines
1.4 KiB
INI
# Update #INITIATOR to the ip address of the initiator system
|
|
# Update #RESPONDER to the ip address of the responder system
|
|
# Update #AUTHENTICATION_METHOD with the authentication method,
|
|
# pre_shared_key, rsa_signature or dss_signature.
|
|
# Update #CERTIFICATE to the file name of the certificiate used for
|
|
# authentication_method rsa_signature or dss_signature.
|
|
# Update #PRIVATE_KEY to the file name of the private key used for
|
|
# authentication_method rsa_signature or dss_signature.
|
|
|
|
general {
|
|
listen #RESPONDER;
|
|
exchange_max_time 30;
|
|
spi_min 100000;
|
|
spi_max 199999;
|
|
}
|
|
ike_sa address #INITIATOR {
|
|
ike_id default;
|
|
exchange_version 1,2;
|
|
passive on;
|
|
liveness 0;
|
|
initial_contact off;
|
|
lifetime 8 hours;
|
|
authentication {
|
|
method #AUTHENTICATION_METHOD;
|
|
shared_key this_should_be_secret;
|
|
certificate #CERTIFICATE;
|
|
private_key #PRIVATE_KEY;
|
|
private_key_password 1111;
|
|
trusted_ca_store trusted;
|
|
intermediate_ca_store intermediate;
|
|
}
|
|
proposal {
|
|
dh_group 2,1;
|
|
hash_algorithm sha1,md5;
|
|
encryption_algorithm 3des,des;
|
|
integrity_algorithm sha1,md5;
|
|
}
|
|
}
|
|
ipsec_sa address #RESPONDER address #INITIATOR {
|
|
ike_id default;
|
|
encapsulation_mode tunnel;
|
|
lifetime 3600 seconds;
|
|
proposal {
|
|
dh_group 2,1;
|
|
encryption_algorithm 3des,des;
|
|
integrity_algorithm sha1,md5;
|
|
}
|
|
}
|