Openswan ×?Linux ipsec vpn ·t???÷(?t)(2)

      # rsakey AQNYfk+V8        #óòí?1?1???

     rightrsasigkey=0sAQNYfk+V851n9R3vrwNcZFGRqYyuhjRaRyYKIIE0RvBGjHot6JWS1SQINXPy/i+TKTkte3BY104SkV+fd1GH2kZD6UjLQGq85M6waDVteVlxPBsr8+W2XRJVu9REkqT211y85N4HsCMoNDf/B9bjne11hHKsJQCu/DSgt89MSnmvuIHDggz2rs/00awBrg5SOTbi5P6YDncQNx2iU05TD8JY3QqkWyyqWxrthkV/WRpsFtAvW55B5pO0Ply+5heNcWPKSIExw7nfCzJqeaQV/pPVpZt9Kbl4IsqE1SV6BN9MqHPh2ady+avsn6SfXOImrDyp2DZ2+czJEiVrnntnzmU3mT3Wy3WAoiZOPNcYS3yJQpsz

      rightsubnet=172.16.1.0/24   #óòí?1??ù?ú?úí?μ?í???

      rightid=@right             #óòí?1?μ?±êê?

      rightnexthop=%defaultroute  #óòí?1?μ???ò?ì????¨?a??è??·óéμ??·

      auto=start                 #ìí?ó?a??á′?ó,???ˉê±×??ˉá??ó

4 ·?±e?ú×óóòí?1?é?????iptables

  I  ?ú×?í?1?é?????è???

    #iptables –t nat  -A  POSTROUTING –o  eth1  -s  192.168.1.0/24 –d ! 172.16.1.0/24 –j MASQUERADE

  II  ?úóòí?1?é?????iptables

     #iptables –t  nat  -A  POSTROUTING –o  eth1  -s 172.16.1.0/24   -d  ! 192.168.1.0/24  -j  MASQUERADE

5 ???ˉipsec2￠???ˉá??ó

  #service  ipsec  start

  #ipsec  verify

    Checking your system to see if IPsec got installed and started correctly:

Version check and ipsec on-path                                [OK]

Linux Openswan U2.6.34/K2.6.18-164.el5 (netkey)

Checking for IPsec support in kernel                               [OK]

 SAref kernel support                                               [N/A]

 NETKEY:  Testing XFRM related proc values                      [OK]

          [OK]

          [OK]

Checking that pluto is running                                   [OK]