Проверял, с raccon работает без нареканий.
Настройки при проверке были такие:
Код:
# $KAME: racoon.conf.in,v 1.18 2001/08/16 06:33:40 itojun Exp $
path include "/etc/racoon";
path pre_shared_key "/etc/racoon/psk.txt";
log notify;
padding
{
maximum_length 20; # maximum padding length.
randomize off; # enable randomize length.
strict_check off; # enable strict check.
exclusive_tail off; # extract last one octet.
}
timer
{
# These value can be changed per remote node.
counter 5; # maximum trying count to send.
interval 20 sec; # maximum interval to resend.
persend 1; # the number of packets per send.
# maximum time to wait for completing each phase.
phase1 30 sec;
phase2 15 sec;
}
listen
{
isakmp 192.168.100.47 [500];
isakmp_natt 192.168.100.47 [4500];
}
remote 192.168.100.106
{
exchange_mode main;
doi ipsec_doi;
situation identity_only;
my_identifier address 192.168.100.47;
peers_identifier address 192.168.100.106;
#lifetime time 28800 sec;
initial_contact on;
nat_traversal off;
generate_policy unique;
proposal_check obey;
proposal {
encryption_algorithm 3des;
hash_algorithm md5;
authentication_method pre_shared_key;
dh_group 2;
lifetime time 28800 sec;
}
}
sainfo subnet 192.168.10.0/24 any subnet 192.168.1.0/24 any
{
pfs_group 2;
lifetime time 3600 sec;
encryption_algorithm 3des;
authentication_algorithm hmac_md5;
compression_algorithm deflate;
}
Вход
Регистрация
FAQ
Поиск
