Browse Source

Similar to the sample pf.conf, comment out everything. Suggested

by okan@demirmen.com, thanks!
OPENBSD_4_0
hshoexer 18 years ago
parent
commit
be3f56e98b
1 changed files with 9 additions and 9 deletions
  1. +9
    -9
      src/etc/ipsec.conf

+ 9
- 9
src/etc/ipsec.conf View File

@ -1,4 +1,4 @@
# $OpenBSD: ipsec.conf,v 1.3 2006/08/24 12:23:30 hshoexer Exp $
# $OpenBSD: ipsec.conf,v 1.4 2006/08/24 12:47:37 hshoexer Exp $
# #
# See ipsec.conf(5) for syntax and examples. # See ipsec.conf(5) for syntax and examples.
@ -8,10 +8,10 @@
# second between the machines 192.168.3.1 and 192.168.3.2. # second between the machines 192.168.3.1 and 192.168.3.2.
# Use FQDNs as IDs. # Use FQDNs as IDs.
ike esp from 10.1.1.0/24 to 10.1.2.0/24 peer 192.168.3.2 \
srcid me.mylan.net dstid the.others.net
ike esp from 192.168.3.1 to 192.168.3.2 \
srcid me.mylan.net dstid the.others.net
#ike esp from 10.1.1.0/24 to 10.1.2.0/24 peer 192.168.3.2 \
# srcid me.mylan.net dstid the.others.net
#ike esp from 192.168.3.1 to 192.168.3.2 \
# srcid me.mylan.net dstid the.others.net
# Set up a tunnel using static keying: # Set up a tunnel using static keying:
# #
@ -20,7 +20,7 @@ ike esp from 192.168.3.1 to 192.168.3.2 \
# and aesctr for encryption. hmac-sha2-256 uses a 256-bit key; aesctr # and aesctr for encryption. hmac-sha2-256 uses a 256-bit key; aesctr
# a 160-bit key. # a 160-bit key.
flow esp from 192.168.7.0/24 to 192.168.8.0/24 peer 192.168.3.2
esp from 192.168.3.1 to 192.168.3.2 spi 0xdeadbeef:0xbeefdead \
authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa:0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \
enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee:0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
#flow esp from 192.168.7.0/24 to 192.168.8.0/24 peer 192.168.3.2
#esp from 192.168.3.1 to 192.168.3.2 spi 0xdeadbeef:0xbeefdead \
# authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa:0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \
# enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee:0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee

Loading…
Cancel
Save