Openswan ×?Linux ipsec vpn ·t???÷(?t)(4)

100

20:13:36.490382 IP 1.1.1.2 > 1.1.1.1: ESP(spi=0x5dd784dd,seq=0x16f), length

100

20:13:37.489973 IP 1.1.1.1 > 1.1.1.2: ESP(spi=0x6b26c2e7,seq=0x170), length

100

20:13:37.492400 IP 1.1.1.2 > 1.1.1.1: ESP(spi=0x5dd784dd,seq=0x170), length

100

×￠: ?a??·?ê????ü?¨á￠net-to-net ??μ?á??ó,2￠2??üè·±￡gateway-gateway ????μ?á??ó?ò??gateway-subnet ????μ?á??ó.è?1???òaê1ó?′???á??ó,±èè?ò?·?μ?í?1??1ê?ò??????t·t???÷ê±,???′?1Dèòa??ía?¨á￠????μ?á??ó

(?t)  Road Warrior

  1  í????·?3

     Left networkß---àLeft GateWayß------àlaptop(Linux?μí3)

   192.168.1.0/24     eth0:192.168.1.1      eth1:1.1.1.2

                     eth1:1.1.1.1          GW 1.1.1.2

                     GW:1.1.1.2

2 í??ùDèòa??è???·?μ?1???,laptop ?aóò,????μ?·?·¨oínet-to-net àà??

3 ?úroad ?÷???????t?D???2ìí?óè???

  #vim   /etc/ipsec.conf

     conn road

      left=1.1.1.1

      leftid=@vpnserver

      leftsubnet=192.168.1.0/24

      # rsakey AQOebBxva

     leftrsasigkey=0sAQOebBxvanOwfLdEF3xuAt8M1JaY0OxtQq/B5x93pZrI6h9U4wWxNpWwOh6kcm1K8ylqtd8upzcbL/PaU+OKmIA4MwXgAextJ+jGtNfU13eKHENerSgt5QkmCJe86j2hq2UvSFO6q/v4tWI/SA2zt2r9UIT5J7oKfkyGesY7dUS/Oc/bFN84y72yZVyJ9TETaASY9OYOY0A6wHXsgG5ULyQMMLVfHViNNZLjJklQDd/+vb7etAOAt4QAp/U6dE4/L+5Fe95baTdsnSxISCVlXZiOr2v8szQ6lLikPlBDAKpSdpaEsDunvTVajbdl0L25ilCgt4h6sPeqFd8uZCTyn19FIRNNOBceSQFc5VW8JtiBEbjt

 #     leftnexthop=%defaultroute

      right=%any

      rightid=@laptop

      # rsakey AQOebBxva

     rightrsasigkey=0sAQOebBxvanOwfLdEF3xuAt8M1JaY0OxtQq/B5x93pZrI6h9U4wWxNpWwOh6kcm1K8ylqtd8upzcbL/PaU+OKmIA4MwXgAextJ+jGtNfU13eKHENerSgt5QkmCJe86j2hq2UvSFO6q/v4tWI/SA2zt2r9UIT5J7oKfkyGesY7dUS/Oc/bFN84y72yZVyJ9TETaASY9OYOY0A6wHXsgG5ULyQMMLVfHViNNZLjJklQDd/+vb7etAOAt4QAp/U6dE4/L+5Fe95baTdsnSxISCVlXZiOr2v8szQ6lLikPlBDAKpSdpaEsDunvTVajbdl0L25ilCgt4h6sPeqFd8uZCTyn19FIRNNOBceSQFc5VW8JtiBEbjt

      #rightnexthop=%defaultroute

      auto=start

4 ?úlaptop é??÷???????t?Dìí?óò????úèY

   #vim  /etc/ipsec.conf

     conn road