Page MenuHomeVyOS Platform
Files F118305767

pki-ipsec
No OneTemporary
Actions

Size
4 KB
Referenced Files
None
Subscribers
None

pki-ipsec
View Options

interfaces {
dummy dum0 {
address 172.20.0.1/30
}
ethernet eth0 {
address 192.168.150.1/24
}
}
system {
config-management {
commit-revisions 100
}
console {
device ttyS0 {
speed 115200
}
}
host-name vyos
login {
user vyos {
authentication {
encrypted-password $6$2Ta6TWHd/U$NmrX0x9kexCimeOcYK1MfhMpITF9ELxHcaBU/znBq.X2ukQOj61fVI2UYP/xBzP4QtiTcdkgs7WOQMHWsRymO/
plaintext-password ""
}
}
}
ntp {
server time1.vyos.net {
}
server time2.vyos.net {
}
server time3.vyos.net {
}
}
syslog {
global {
facility all {
level info
}
facility protocols {
level debug
}
}
}
}
vpn {
ipsec {
esp-group MyESPGroup {
proposal 1 {
encryption aes128
hash sha1
}
}
ike-group MyIKEGroup {
proposal 1 {
dh-group 2
encryption aes128
hash sha1
}
}
ipsec-interfaces {
interface eth0
}
site-to-site {
peer 192.168.150.2 {
authentication {
mode x509
x509 {
ca-cert-file ovpn_test_ca.pem
cert-file ovpn_test_server.pem
key {
file ovpn_test_server.key
}
}
}
default-esp-group MyESPGroup
ike-group MyIKEGroup
local-address 192.168.150.1
tunnel 0 {
local {
prefix 172.20.0.0/24
}
remote {
prefix 172.21.0.0/24
}
}
}
peer 192.168.150.3 {
authentication {
mode rsa
pre-shared-secret MYSECRETKEY
rsa-key-name peer2
}
default-esp-group MyESPGroup
ike-group MyIKEGroup
local-address 192.168.150.1
tunnel 0 {
local {
prefix 172.20.0.0/24
}
remote {
prefix 172.22.0.0/24
}
}
}
}
}
l2tp {
remote-access {
authentication {
local-users {
username alice {
password notsecure
}
}
mode local
}
client-ip-pool {
start 192.168.255.2
stop 192.168.255.254
}
ipsec-settings {
authentication {
mode x509
x509 {
ca-cert-file /config/auth/ovpn_test_ca.pem
server-cert-file /config/auth/ovpn_test_server.pem
server-key-file /config/auth/ovpn_test_server.key
}
}
}
outside-address 192.168.150.1
}
}
rsa-keys {
local-key {
file /config/auth/ovpn_test_server.key
}
rsa-key-name peer2 {
rsa-key 0sAwEAAbudt5WQZSW2plbixjpgx4yVN/WMHdYRIZhyypJWO4ujQ/UQS9j3oTBgV2+RLtQ0YQ7eocwIfkvJVUnnZVMyZ4asQMOarQgbQ5nFGliCcDOMtNXRxHlMsvmjLx4o6FWbGukwgoxsT2x915n0XMn4XJNNSIEQotxj2GWFhEfBSPHyOM++kODk0lkbE7mLeHMMFq02vQhoczzEPWxjUUoY3jywhmHMfb4PdAKLFyt9x40znmPCYh+NSMQmpBXtD3gjGtX62bgrqKuP3BJU44x1gLlv8rJAJ4SY74YKnFUZ8m5GSbnVapwPOrp65lJZFKOGs2XXjAp5leoR+wmSYyqbDJM=
}
}
}
// Warning: Do not remove the following line.
// vyos-config-version: "bgp@1:broadcast-relay@1:cluster@1:config-management@1:conntrack@2:conntrack-sync@2:dhcp-relay@2:dhcp-server@5:dhcpv6-server@1:dns-forwarding@3:firewall@5:https@2:interfaces@22:ipoe-server@1:ipsec@6:isis@1:l2tp@3:lldp@1:mdns@1:nat@5:nat66@1:ntp@1:policy@1:pppoe-server@5:pptp@2:qos@1:quagga@9:rpki@1:salt@1:snmp@2:ssh@2:sstp@3:system@21:vrf@2:vrrp@2:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2:zone-policy@1"
// Release version: 1.4-rolling-202106290839

File Metadata

Mime Type
text/plain
Expires
Sat, Oct 17, 12:07 AM (1 d, 4 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
4350181
Default Alt Text
pki-ipsec (4 KB)

Event Timeline