From 2ba6405d05ffa59acf0144b7a60b6249e12d94e4 Mon Sep 17 00:00:00 2001 From: gollum Date: Mon, 11 Mar 2013 18:35:37 +0100 Subject: [PATCH] Updated gre-plus-ipsec-debian (markdown) --- gre-plus-ipsec-debian.md | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/gre-plus-ipsec-debian.md b/gre-plus-ipsec-debian.md index 7612a69..9eaf3f2 100644 --- a/gre-plus-ipsec-debian.md +++ b/gre-plus-ipsec-debian.md @@ -30,6 +30,7 @@ setkey -DP ``` ## Configure the racoon daemon +An example /etc/racoon/racoon.conf. ``` path pre_shared_key "/etc/racoon/psk.txt"; path certificate "/etc/racoon/certs"; @@ -70,4 +71,18 @@ sainfo (address 1.2.3.4 address 5.6.7.8 47) { encryption_algorithm aes 256; authentication_algorithm hmac_sha1; compression_algorithm deflate; -} \ No newline at end of file +} +``` + +## Configure a GRE tunnel +Add this to /etc/network/interfaces: +``` +auto tun0 +iface tun0 inet static + address 10.0.0.1 + netmask 255.255.255.255 + up ifconfig tun0 multicast + pre-up iptunnel add tun0 mode gre local 1.2.3.4 remote 5.6.7.8 ttl 255 + pointtopoint 10.0.0.2 + post-down iptunnel del tun0 +```