标签: openswan

root@t-Aspire-5742:/# sudo ipsec verify

Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                                 [OK]

Linux Openswan U2.6.37/K3.5.0-42-generic (netkey)
Checking for IPsec support in kernel                            [OK]

 SAref kernel support                                           [N/A]

 NETKEY:  Testing XFRM related proc values                      [FAILED]

  Please disable /proc/sys/net/ipv4/conf/*/send_redirects
  or NETKEY will cause the sending of bogus ICMP redirects! [FAILED]

  Please disable /proc/sys/net/ipv4/conf/*/accept_redirects
  or NETKEY will accept bogus ICMP redirects                    [OK]

Checking that pluto is running                                  [OK]

 Pluto listening for IKE on …

我正在尝试设置 L2TP/IPsec VPN。我已经从 Ubuntu 13.04 上的存储库安装了 openswan

Section: universe/net
Architecture: amd64
Version: 1:2.6.38-1

并按照社区文档对其进行配置。

# cat /etc/ipsec.conf 
config setup
    nat_traversal=yes
    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!192.168.23.0/24
    oe=off
    protostack=netkey

conn L2TP-PSK-NAT
    rightsubnet=vhost:%priv
    also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    rekey=no
    # Apple iOS doesn't send delete notify so we need dead peer detection
    # to detect vanishing clients
    dpddelay=30
    dpdtimeout=120
    dpdaction=clear
    # Set ikelifetime and keylife to same defaults windows has
    ikelifetime=8h
    keylife=1h
    type=transport
    # Replace IP address with your local IP (private, behind …

我安装了 ubuntu 服务器 16.04，互联网连接正常apt-get install openswan，但运行仍然失败，给出E: Package 'openswan' has no installation candidate. 有谁知道会发生什么？

我有一个 Ubuntu 服务器 (14.04.1 LTS)，它应该连接到 Cisco ASA 5510（自适应安全设备）。我试过 - 使用Racoon没有任何成功。甚至第一阶段都不成功。

拓扑看起来像这样；

Cisco ASA 5510 规定应使用以下设置（只是所有者的策略）；

阶段1：

Authentication Method: PSK
Encryption Scheme: IKE
Diffie-Hellman Group: Group 2
Encryption Algorithm: 3DES
Hashing Algorithm: MD5
Main or Aggressive Mode: Main Mode
Lifetime (for renegotiation): 28800 seconds

阶段2

Encapsulation (ESP or AH): ESP
Encryption Algorithm: 3DES
Authentication Algorithm: MD5
Perfect Forward Secrecy: NO PFS
Lifetime (for renegotiation): 3600
Lifesize in KB (for renegotiation): 4608000 kilobytes

我有所有的 IP 地址和两端的加密域。最后，它是另一台服务器，所有“重要”的事情都发生在那里。运行 VPN 的这个实际上充当了我的网关。

我已经花了几天时间尝试使用Racoon，但 …