UC-8112-LX-STK Manual
Wireless Module Settings
5-5
Configuring the IPSec Settings
To set up the IP address of the IPSec server, edit the following file:
/etc/ipsec-tools.conf
## Flush the SAD and SPD
#
flush;
spdflush;
## Some sample SPDs for use racoon
#
spdadd 10.10.10.78 10.10.10.10 any -P out ipsec
esp/transport//require;
#
spdadd 10.10.10.10 10.10.10.78 any -P in ipsec
esp/transport//require;
Note that
10.10.10.10
is the IP address of the remote host.
To configure the setup key, edit the following file:
/etc/racoon/racoon.conf
log notify;
path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs";
remote anonymous {
exchange_mode main,aggressive;
proposal {
encryption_algorithm aes_256;
hash_algorithm sha256;
authentication_method pre_shared_key;
dh_group modp1024;
}
generate_policy off;
}
sainfo anonymous{
pfs_group 2;
encryption_algorithm aes_256;
authentication_algorithm hmac_sha256;
compression_algorithm deflate;
}
To configure the pre-shared key, edit the following file:
/etc/racoon/psk.txt.
–
10.10.10.10 1234567890
–
/etc/init.d/setkey restart
/etc/init.d/racoon restart
Note: Authentication Mode
–
Pre-shared key
–
X.509
In this example,
10.10.10.10
is the IP address of the host, while
1234567890
is the pre-shared key.
To start the IPSec configuration, run the following commands:
/etc/init.d/setkey restart
/etc/init.d/racoon restart
