[Openswan Users] Connect Openswan with Greenbow
Michael Wagner
znnac at wagnertech.de
Thu Aug 28 17:05:59 EDT 2008
Hi list,
I'm a complete newbee to VPN. This is what i like to do:
I want connect my LINUX-Openswan client to a Windows-Greenbow server.
How to configure openswan?
Where should i start to read?
I have a greenbow configuration file with the following data (the concrete
data is omitted)
# Do not edit this file. It is overwritten by VpnConf.
# SIGNATURE SHA = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
# Creation Date : 2006-04-26 at 14:20:02
# Written by VpnConf 3.10
#
[General]
Shared-SADB = ...
Retransmits = ...
Exchange-max-time = ...
Default-phase-1-lifetime = ...
Bitblocking = ...
Xauth-interval = ...
DPD-interval = ...
DPD_retrans =...
DPD_wait = ...
[Default-phase-2-lifetime]
LIFE_TYPE = ...
LIFE_DURATION = ...
# ==================== PHASES 1 ====================
[Phase 1]
#> nnn.nnn.nnn.nnn = XXX
[XXX-main-mode]
DOI = IPSEC
EXCHANGE_TYPE = ID_PROT
Transforms = AES128-SHA-GRP1
[XXX-P1]
Phase = 1
Address = ...
Transport = udp
Configuration = XXX-main-mode
Authentication = ...
Xauth = ...
Xpopup = ...
Xuser = "nobody"
Xpasswd = ...
ID = ...
Remote-ID = ...
[XXX-ID]
ID-Type = FQDN
Name = ...
[XXX-REMOTEID]
ID-Type = IPV4_ADDR
Address = ...
# ==================== PHASES 2 ====================
[Phase 2]
Passive-connections = XXX-XXX-P2
[XXX-XXX-P2]
Phase = 2
ISAKMP-peer = XXX-P1
Remote-ID = XXX-remote-addr
Configuration = XXX-quick-mode
AutoStart = ...
USBStart = ...
# ==================== Ipsec ID ====================
[XXX-remote-addr]
ID-type = IPV4_ADDR_SUBNET
Network = ...
Netmask = 255.255.252.0
# ==================== TRANSFORMS ====================
[XXX-quick-mode]
DOI = IPSEC
EXCHANGE_TYPE = QUICK_MODE
Suites = XXX-quick-mode-suite
[XXX-quick-mode-suite]
Protocols = TGBQM-ESP-AES128-SHA-TUN
[TGBQM-ESP-AES128-SHA-TUN]
PROTOCOL_ID = IPSEC_ESP
Transforms = TGBQM-ESP-AES128-SHA-TUN-XF
[TGBQM-ESP-AES128-SHA-TUN-XF]
TRANSFORM_ID = AES128
AUTHENTICATION_ALGORITHM = HMAC_SHA
ENCAPSULATION_MODE = TUNNEL
Life = ...
--
Michael J.M. Wagner
More information about the Users
mailing list