7.3.2 Net-to-net Freeswanin ja Draytek Vigor:in välille

Tässä kappaleessa esimerkkikonfiguraatio Freeswanin ja Draytek Vigor:in välille käyttäen PSK:ta. Vigor ei tue RSA:ta. Esimerkissä Vigor toimii soittavana osapuolena.

# Left ipsec.conf

version 2.0

config setup
        klipsdebug=none
        plutodebug=none
        overridemtu=1400
        fragicmp=no

conn %default
        keyingtries=3

# OE policy groups are disabled by default

conn block
        auto=ignore

conn clear
        auto=ignore

conn private
        auto=ignore

conn private-or-clear
        auto=ignore

conn clear-or-private
        auto=ignore

conn packetdefault
        auto=ignore

conn vigor
        type=tunnel
        left=<left static ip-address>
        leftsubnet=192.168.20.0/24
        leftnexthop=<left gateway ip-address>
        right=80.223.14.90
        rightsubnet=192.168.1.0/24
        auto=add
        pfs=yes
        authby=secret

# end of Left ipsec.conf

------------------------------

# Left ipsec.secrets

<left static ip-address> <right static ip-address>: PSK "1234"

# end of Left ipsec.secrets

------------------------------

# Right (Draytek Vigor configuration)

Muuten oletuksilla, mutta seuraavat muutokset

VPN and Remote Access Setup

  LAN-to-LAN Profile Setup

    Index 1

      1. Common settings

         Profile name: "Vigor"
         Enable this profile
				
      2. Dial-Out Settings
				
         IPSec Tunnel
         Server IP/Host name: <left static ip-address>
         IKE PRE-Shared Key: 1234
         IPSec Security Method: High (ESP) 3DES with 
         authentication
			
         Advance: 
         Perfect forward secret: Enable
			
      4. TCP/IP Settings
			
         My WAN IP: 0.0.0.0
         Remote Gateway IP: 0.0.0.0
         Remote Network IP: 192.168.20.0
         Remote Network Mask: 255.255.255.0

# End of Vigor configuration