User Tools

Site Tools


documentation:examples:gre_ipsec_and_openvpn

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
documentation:examples:gre_ipsec_and_openvpn [2020/09/15 16:21] – [Router 2] olivierdocumentation:examples:gre_ipsec_and_openvpn [2022/07/08 11:59] – [Tunnel with IKEv2 (strongswan)] olivier
Line 254: Line 254:
 Take care of avoiding fragmentation, TCP-MSS should be reduced on a gif using inet6, like with this pf.conf example: Take care of avoiding fragmentation, TCP-MSS should be reduced on a gif using inet6, like with this pf.conf example:
 <code> <code>
-[root@VM2]~# cat /etc/pf.conf 
 set skip on lo0 set skip on lo0
 scrub on gif1 inet all max-mss 1200 scrub on gif1 inet all max-mss 1200
Line 698: Line 697:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.conf <<'EOF'+cat > /usr/local/etc/ipsec.conf <<EOF
 config setup config setup
  
Line 716: Line 715:
     rightid=VM4     rightid=VM4
     auto=start     auto=start
-'EOF'+EOF
 </code> </code>
  
Line 722: Line 721:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.secrets <<'EOF'+cat > /usr/local/etc/ipsec.secrets <<EOF
 VM4 VM2 : PSK "This is a strong password" VM4 VM2 : PSK "This is a strong password"
-'EOF'+EOF
 </code> </code>
  
Line 730: Line 729:
  
 <code> <code>
-sysrc strongswan_enable=YES+service strongswan enable
 service strongswan restart service strongswan restart
 </code> </code>
Line 744: Line 743:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.conf <<'EOF'+cat > /usr/local/etc/ipsec.conf <<EOF
 config setup config setup
  
Line 761: Line 760:
     rightid=VM2     rightid=VM2
     auto=route     auto=route
-'EOF'+EOF
 </code> </code>
  
Line 767: Line 766:
  
 <code> <code>
-cat > /usr/local/etc/ipsec.secrets <<'EOF'+cat > /usr/local/etc/ipsec.secrets <<EOF
 VM4 VM2 : PSK "This is a strong password" VM4 VM2 : PSK "This is a strong password"
-'EOF'+EOF
 </code> </code>
  
Line 775: Line 774:
  
 <code> <code>
-sysrc strongswan_enable=YES+service strongswan enable
 service strongswan restart service strongswan restart
 </code> </code>
documentation/examples/gre_ipsec_and_openvpn.txt · Last modified: 2023/07/10 12:40 by olivier

Except where otherwise noted, content on this wiki is licensed under the following license: BSD 2-Clause
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki