ClearFoundation

i will have 4 conn, then im confused where i have to add.

ike=aes256-sha1;modp1024
ikelifetime=28800s
phase2alg=aes256-sha1
keylife=28800s
pfs=no
auto=start

if /etc/conn1.conf

include /etc/ipsec.d/*.conf
----------------------

ipsec.d/ tun01
conn hqnettun01-satnettun01
left=200.6.231.34
leftnexthop=200.6.231.33
leftsubnet=192.168.1.0/255.255.0.0
right=125.1.1.25
rightnexthop=190.242.51.76
rightsubnet=125.1.1.0/255.255.255.0

conn hqgatetun01-satnettun01
left=200.6.231.34
leftnexthop=200.6.231.33
right=125.1.1.25
rightnexthop=190.242.51.76
rightsubnet=125.1.1.0/255.255.255.0

conn hqnettun01-satgatetun01
left=200.6.231.34
leftnexthop=200.6.231.33
leftsubnet=192.168.10.0/255.255.0.0
right=125.1.1.25
rightnexthop=190.242.51.76

conn hqgatetun01-satgatetun01
left=200.6.231.34
leftnexthop=200.6.231.33
right=125.1.1.25
rightnexthop=190.242.51.76

after all of this or before ?

thanks

those are the conf i need to setup, now im newie at ipsec worrld and openswan, then my question is.

where i have to insert those configuration.

/etc/ipsec.con
or /etc/ipsec.d/myconn.conf

thanks Nick

rekey=yes
keyingtries=5
keyexchange=ike
ike=modp1024
ikelifetime=28800s
phase2=esp
phase2alg=aes256-sha1
keylife=28800s
pfs=no
auto=start

Thanks Nick, www.ecualug.org/2012/01/10/blog/iknaxio/...serie_5500_con_ipsec
ill try this.

the other point is ASA 5540 hw.

regards

Hi every body, im trying to configure Ipsec Vpn with the configuration above,

Negotiation = aggresive mode
Diffie-Hellman-Group= G2 (1024bit)
Renegotiation IKE - seconds 28000
Ike retransmision

Phase2
SHA/Hmac-160
Encryption Algoritm AES256
Renegotiation IKE - 28000s

im Using ClearOS 5.2
Linux Openswan U2.6.21/K2.6.18-308.1.1.v5PAE (netkey)

got /etc/ipsec.conf
and /etc/ipsec.d/ipsec.tunn1.conf

then let me know if someone know the syntax and how to configure

thanks by advance