API tools faq
paste
Advertisement
smithy1208

ipsec-hq

smithy1208
Aug 7th, 2022
777
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 3.35 KB | None | 0 0
raw download clone embed print report
  1. # aug/07/2022 16:41:29 by RouterOS 6.48.6
  2. #
  3. # model = RB1100x4
  4. /ip ipsec policy group add name=ike2-gre
  5. /ip ipsec profile set [ find default=yes ] dh-group=modp2048,modp1536,modp1024 enc-algorithm=aes-256,aes-128
  6. /ip ipsec profile add dh-group=ecp256,modp2048,modp1024 enc-algorithm=aes-256,aes-192,aes-128 name=ike2
  7. /ip ipsec peer add address=213.208.176.94/32 exchange-mode=ike2 local-address=212.34.59.34 name=gre_avto1_yasen1 passive=yes profile=ike2 send-initial-contact=no
  8. /ip ipsec peer add address=213.208.176.94/32 disabled=yes exchange-mode=ike2 local-address=81.211.58.206 name=gre_avto2_yasen1 passive=yes profile=ike2 send-initial-contact=no
  9. /ip ipsec peer add address=194.154.89.198/32 exchange-mode=ike2 local-address=81.211.58.206 name=gre_avto2_kry2 passive=yes profile=ike2 send-initial-contact=no
  10. /ip ipsec peer add address=95.131.179.206/32 exchange-mode=ike2 local-address=212.34.59.34 name=gre_avto1_kry1 passive=yes profile=ike2 send-initial-contact=no
  11. /ip ipsec peer add address=91.143.47.34/32 exchange-mode=ike2 local-address=212.34.59.34 name=gre_avto1_him1 passive=yes profile=ike2 send-initial-contact=no
  12. /ip ipsec peer add address=87.255.26.72/32 exchange-mode=ike2 local-address=81.211.58.206 name=gre_avto2_him2 passive=yes profile=ike2 send-initial-contact=no
  13. /ip ipsec peer add address=62.141.79.173/32 exchange-mode=ike2 local-address=81.211.58.206 name=gre_avto2_yasen2 passive=yes profile=ike2 send-initial-contact=no
  14. /ip ipsec proposal set [ find default=yes ] auth-algorithms=sha512,sha256,sha1 enc-algorithms=aes-256-cbc,aes-256-ctr,aes-256-gcm,aes-192-cbc,aes-192-ctr,aes-192-gcm,aes-128-cbc,aes-128-ctr,aes-128-gcm
  15. /ip ipsec proposal add name=ike2-gre pfs-group=none
  16. /ip ipsec identity add comment=gre_avto2_kry2 generate-policy=port-strict peer=gre_avto2_kry2 policy-template-group=ike2-gre
  17. /ip ipsec identity add generate-policy=port-strict peer=gre_avto1_kry1 policy-template-group=ike2-gre
  18. /ip ipsec identity add comment=gre_avto2_him2 generate-policy=port-strict peer=gre_avto2_him2 policy-template-group=ike2-gre
  19. /ip ipsec identity add comment=gre_avto1_him1 generate-policy=port-strict peer=gre_avto1_him1 policy-template-group=ike2-gre
  20. /ip ipsec identity add comment=gre_avto1_yasen1 generate-policy=port-strict peer=gre_avto1_yasen1 policy-template-group=ike2-gre
  21. /ip ipsec identity add comment=gre_avto2_yasen2 generate-policy=port-strict peer=gre_avto2_yasen2 policy-template-group=ike2-gre
  22. /ip ipsec identity add generate-policy=port-strict peer=gre_avto2_yasen1 policy-template-group=ike2-gre
  23. /ip ipsec policy set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
  24. /ip ipsec policy add dst-address=95.131.179.206/32 peer=gre_avto1_kry1 proposal=ike2-gre protocol=gre src-address=212.34.59.34/32
  25. /ip ipsec policy add dst-address=194.154.89.198/32 peer=gre_avto2_kry2 proposal=ike2-gre protocol=gre src-address=81.211.58.206/32
  26. /ip ipsec policy add dst-address=91.143.47.34/32 peer=gre_avto1_him1 proposal=ike2-gre protocol=gre src-address=212.34.59.34/32
  27. /ip ipsec policy add dst-address=87.255.26.72/32 peer=gre_avto2_him2 proposal=ike2-gre protocol=gre src-address=81.211.58.206/32
  28. /ip ipsec policy add dst-address=213.208.176.94/32 peer=gre_avto1_yasen1 proposal=ike2-gre protocol=gre src-address=212.34.59.34/32
  29. /ip ipsec policy add dst-address=62.141.79.173/32 peer=gre_avto2_yasen2 proposal=ike2-gre protocol=gre src-address=81.211.58.206/32
  30.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!