User manual
19: Configuring IPSec
_______________________________________________________________________________________________________
Strongswan.@connection[0].locallan=10.1.1.0
Strongswan.@connection[0].locallanmask=255.255.255.0
Strongswan.@connection[0].remoteid=10.2.2.2
Strongswan.@connection[0].remoteaddress=10.2.2.2
Strongswan.@connection[0].remotelan=10.2.2.2
Strongswan.@connection[0].remotelanmask=255.255.255.0
Strongswan.@connection[0].ike=3des-md5-modp1024
Strongswan.@connection[0].esp=3des-md5
Strongswan.@connection[0].auto=start
Strongswan.@connection[0].ikelifetime=8h
Strongswan.@connection[0].keylife=1h
Strongswan.@connection[0].rekeymargin=9m
Strongswan.@connection[0].keyingtries=3
Strongswan.@connection[0].dpdaction=hol
Strongswan.@connection[0].dpddelay=30s
Strongswan.@connection[0].dpdtimeout=120s
Strongswan.@connection[0].enabled=yes
config 'connection'
option enabled 'yes'
option 'type' 'tunnel'
option 'name' "test"
option 'waniface' 'wan'option 'localid' "10.1.1.1"
option 'locallan' "10.1.1.1"
option 'locallanmask' "255.255.255.0"
option 'remoteid' "10.2.2.2"
option 'remoteaddress' "10.2.2.2"
option 'remotelan' "10.2.2.2"
option 'remotelanmask' "255.255.255.0"
option 'ike' "3des-md5-modp1024"
option 'esp' "3des-md5"
option 'auto' 'start'
option 'ikelifetime' "8h"
option 'keylife' "1h"
option 'rekeymargin' "9m"
option 'keyingtries' "3"
option 'dpdaction' "hold"
_______________________________________________________________________________________________________
© Virtual Access 2015
GW1000 Series User Manual
Issue: 2.4 Page 125 of 255