SHARE
TWEET

Untitled

a guest Jun 19th, 2017 51 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. config setup
  2.     charondebug="ike 2, knl 2, cfg 2, dmn 2"
  3.  
  4. conn %default
  5.         ikelifetime=28800s
  6.         keylife=3600s
  7.         rekeymargin=3m
  8.         keyingtries=%forever
  9.         keyexchange=ikev1
  10.         authby=secret
  11.  
  12. conn ciscoios
  13.  
  14.     aggressive=no
  15.     type=tunnel
  16.     auto=start
  17.         left=10.49.43.10                 #strongswan outside address
  18.     leftsubnet=10.49.43.0/24
  19.         leftid=54.233.194.186                #IKEID sent by strongswan
  20.         leftfirewall=yes
  21.         right=201.55.56.30                 #IOS outside address
  22.     rightsubnet=10.61.21.0/24
  23.         rightsourceip=10.61.21.17        #network behind IOS
  24.         rightid=201.55.56.30               #IKEID sent by IOS
  25.  
  26.     ike=aes-sha1-modp1024
  27.         esp=aes128-sha1-modp1024                   #P2
  28.     modeconfig=pull
  29.     dpdaction = none
RAW Paste Data
Top