1
mirror of https://git.dn42.dev/wiki/wiki.git synced 2024-12-09 22:13:08 +01:00

Updated gre-plus-ipsec-debian (markdown)

This commit is contained in:
gollum 2013-03-11 18:35:37 +01:00
parent cec8d1c49a
commit 2ba6405d05

View File

@ -30,6 +30,7 @@ setkey -DP
``` ```
## Configure the racoon daemon ## Configure the racoon daemon
An example /etc/racoon/racoon.conf.
``` ```
path pre_shared_key "/etc/racoon/psk.txt"; path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs"; path certificate "/etc/racoon/certs";
@ -70,4 +71,18 @@ sainfo (address 1.2.3.4 address 5.6.7.8 47) {
encryption_algorithm aes 256; encryption_algorithm aes 256;
authentication_algorithm hmac_sha1; authentication_algorithm hmac_sha1;
compression_algorithm deflate; compression_algorithm deflate;
} }
```
## Configure a GRE tunnel
Add this to /etc/network/interfaces:
```
auto tun0
iface tun0 inet static
address 10.0.0.1
netmask 255.255.255.255
up ifconfig tun0 multicast
pre-up iptunnel add tun0 mode gre local 1.2.3.4 remote 5.6.7.8 ttl 255
pointtopoint 10.0.0.2
post-down iptunnel del tun0
```