Advertisement
Guest User

SiteA_swanctl.conf

a guest
Aug 15th, 2019
305
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.91 KB | None | 0 0
  1. connections {
  2. remote-peer-2 {
  3. local_addrs=172.29.1.104
  4. remote_addrs=172.29.2.73
  5.  
  6. version=1
  7. fragmentation=yes
  8. reauth_time=25920s
  9. over_time=2880s
  10. keyingtries=1
  11. proposals=3des-sha1-modp1024,
  12. dpd_delay=10s
  13.  
  14. local {
  15. id=172.29.1.104
  16. auth=psk
  17. }
  18.  
  19. remote {
  20. id=172.29.2.73
  21. auth=psk
  22. }
  23.  
  24. children {
  25. net-2-0 {
  26. start_action=trap
  27. close_action=none
  28. ipcomp=no
  29. esp_proposals=3des-md5,3des-sha1,aes128-md5,aes128-sha1,aes192-md5,aes192-sha1,aes256-md5,aes256-sha1,
  30. mode=tunnel
  31. inactivity=50000
  32. rekey_time=25920s
  33. life_time=28800s
  34. replay_window=32
  35. dpd_action=trap
  36. local_ts=192.168.127.0/24
  37. remote_ts=192.168.128.0/24
  38. }
  39. net-2-1 {
  40. start_action=trap
  41. close_action=none
  42. ipcomp=no
  43. esp_proposals=3des-md5,3des-sha1,aes128-md5,aes128-sha1,aes192-md5,aes192-sha1,aes256-md5,aes256-sha1,
  44. mode=tunnel
  45. inactivity=50000
  46. rekey_time=25920s
  47. life_time=28800s
  48. replay_window=32
  49. dpd_action=trap
  50. local_ts=192.125.126.0/24
  51. remote_ts=192.168.128.0/24
  52. }
  53. }
  54. }
  55. l2tp-over-ipsec-1 {
  56. local_addrs=172.29.1.104
  57.  
  58. version=1
  59. fragmentation=yes
  60. reauth_time=60m
  61. keyingtries=1
  62. proposals=3des-sha1-modp1024,
  63.  
  64. local {
  65. id=172.29.1.104
  66. auth=psk
  67. }
  68.  
  69. remote {
  70. auth=psk
  71. }
  72.  
  73. children {
  74. net-1 {
  75. start_action=trap
  76. close_action=none
  77. ipcomp=no
  78. esp_proposals=aes128-sha1,3des-sha1,
  79. mode=transport
  80. inactivity=50000
  81. replay_window=32
  82. dpd_action=clear
  83. local_ts=dynamic[/1701]
  84. }
  85. }
  86. }
  87. }
  88. secrets {
  89. ike-2 {
  90. id=172.29.2.73
  91. secret=<hidden>
  92. }
  93. ike-any {
  94. secret=<hidden>
  95. }
  96. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement