ÐÐ ÐÐ ÐÑÐÐÑÐÐ ÐÐ ÑÑÑÐÐÐ ÐÐÐÐÐÑÐ ÐÐ ÐÐÑÑÑÐÐÐÑ ÐÐÐÐÐÐÐ ÐÑÐÐÐ ÐÐÐ ÐÐÑÐÐÐÑÐ, ÐÐÑÑÐ ÑÐÑÐÐÑÐ. ÐÐ ÑÐ ÐÑÐÐÐÐÐ SSHSentinel . On Thu, 2004-11-04 at 11:36 +0200, Georgi Ivanov wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > ÐÐÐÐ ÐÑÐ ÐÐÐÐ ÐÑÐÑÐÑ. ÐÑÐÐ ÑÐÐÐ VPN ÐÐÐÐÑ > ÐÑÐÐÐÐÐÐÑÑ ÐÐ ÐÐÐÐÐÑÐÑÐ ÐÐ > ÐÐÑÑÑÐÐÐÑ ÐÑÐÐÐÐÐ ÐÑÑÑÐÑÐÐ ÐÑÐÐÐ > ÐÐÐ ÑÐ ÑÐÐÐÐÐÐÑ ÐÐÑÐÑÐÐÑ ÐÑÐÐ ÐÐÐÐ ÐÐÐ Ð > ÐÑÐÑÐÑÐ ÑÐ ÐÑÐÐÐÑÑÑÐÐÐ ÐÐ > ÐÐÐÑÐÐÐÑ VPN-a Ñ ÑÑÐÐÑÐÐÑÑÐÐ ÑÑÐÐÐ ÐÐ ÑÐÐÐÐÐÐ > ÐÐÑÐÐ: > openswan(strongswan) +L2TPD > > openswan ipse.conf > version 2.0 > config setup > ~ interfaces=%defaultroute > ~ plutodebug=all > ~ klipsdebug=none > ~ crlcheckinterval=600 > ~ hidetos=yes > ~ uniqueids=no > ~ strictcrlpolicy=yes > ~ nat_traversal=yes > conn %default > ~ left=%defaultroute > ~ compress=yes > ~ rekey=yes > ~ disablearrivalcheck=no > ~ keyingtries=3 > ~ leftcert=strongsw-crt.pem > ~ rekeymargin=30s > ~ rekeyfuzz=100% > ~ pfs=no > ~ authby=rsasig > > conn right1 > ~ type=transport > ~ leftprotoport=17/1701 > ~ right=%any > ~ rightprotoport=17/%any > ~ rightid="/C=BG/ST=Sofia/L=alabala/O=alabala/OU=alabala/CN=alabala" > ~ esp="3des-md5-96,3des-sha1-96" > ~ auto=add > conn block > ~ auto=ignore > conn clear > ~ auto=ignore > conn private > ~ auto=ignore > conn private-or-clear > ~ auto=ignore > conn clear-or-private > ~ auto=ignore > conn packetdefault > ~ auto=ignore > > ÐÐÐÐ ÑÐ Ð ÐÐ openswan , ÐÐÐ ÐÐÐÐÐÐÑ ÐÑÐÐ strongswan transport > ÑÑÑÐÐÐ ÐÐ > ÐÐÐÐÐÐÑ Ð strongswan_version/programs/pluto/Makefile DEFINES= > - -DI_KNOW_TRANSPORT_MODE_HAS_SECURITY_CONCERN_BUT_I_WANT_IT \ > ÐÐ ÐÐ ÐÐÐÐÑ ÐÐ ÐÐÐÐÐÐÑ type=transport. > ÐÐ ÐÑÐÐÐ ÑÐÐÑ ÑÐ ÐÐÐÐÐÑ ÑÐÐÑÐÑ ÐÐÐÐÐÐÐ ÐÐ conn > right ÐÐÑÐ ÑÐÐÐÑÑ ÑÐÐÐ > rightid ÑÐÐÐ Ð subject-a ÐÐ ÐÐÐÐÐÐÑÐÑÐÐÐÑ ÐÐÐÐÐÑÑÐÐ > ÑÐÑÑÐÑÐÐÐÑ ÐÐ ÐÑÐÐÐ > ÐÐÐÐÐÑ ÐÐÐÐÑ ÐÐ ÐÐ ÐÐÐÐÑ ÐÐ ÑÐÐÐÐÐÑ ÐÐÑÐÐ > openssl x509 -noout -subject -in path_to/user-cert.pem > > ÐÐÐÑÐÐÑÑÐÑÐÑÑÐ ÐÐ L2TP: > [global] > ~ port = 1701 > [lns default] > ~ ip range = 192.168.7.1-192.168.7.25 > ~ local ip = 192.168.7.1 > ~ length bit = yes > ~ require chap = yes > ~ refuse pap = yes > ~ require authentication = yes > ~ name = FQDN > ~ ppp debug = yes > pppoptfile = /etc/ppp/options.l2tpd > > ÐÑÐÐÐÐÐ ÑÐÐÐ ÑÑÐÐÐ , ÐÐÐ ÑÐ ÑÐÐÐÐÐÑÐÐÑÑÐÐ . > ÐÐ ÐÐÐÐÐÐÐ ipsec.exe , ÐÑÑÐÐÐ Ð ÐÐÐÑÐÐ Ñ SSHSentinel ÐÑÐ > ÐÐÐÐ ÐÐÐÑ > ÐÑÐÐÐÐÐÐÑÑ ÐÐ ÐÐÑÑÑÐÐÐÐÑ ÐÐÑÑÐ ÐÐÑÐ. > > > - -- > Georgi Ivanov > System Administrator > Aii Data Processing > IT Department > > http://6lyokavitza.org > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.6 (FreeBSD) > Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org > > iD8DBQFBifgL0dEkp0mjhDsRAtr6AJ47JOJpRe0mZedcshX02/5dhN1XkQCcCsFR > +ojwDmPQr53E3E+DKsMC7yE= > =lzr2 > -----END PGP SIGNATURE----- > ============================================================================ > A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora > To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > ============================================================================
signature.asc
Description: This is a digitally signed message part
