Configuration of the SWu Interface [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Next revision    		Previous revision
    en:dpi:epdg:installation_setup:management_and_administration:swu:start [2024/05/13 15:39] – created elena.krasnobryzhen:dpi:epdg:installation_setup:management_and_administration:swu:start [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1
    Line 1: Line 1:
    -{{indexmenu_n>1}} 
    -======Configuration of the SWu Interface====== 
    -The parameters of the SWu interface are located in the file ''/etc/ipsec.conf'' 
    - 
    -=====Section "conn <connection-name>"===== 
    - 
    -^  Parameter          ^  Description                                ^  Value                                                          ^ 
    -| ''ike''            | IKEv2 protocol parameters                  | aes256-sha256-sha1-prfsha256-prfsha1-modp2048-modp1024!         | 
    -| ''esp''            | ESP protocol parameter                     | aes256-sha256-sha1-modp2048-modp1024!                           | 
    -| ''leftauth''       | Gateway authentication method              | eap                                                             | 
    -| ''leftsubnet''     | Network serviced by the server             | AAA.BBB.CCC.DDD/MM, 1111.2222.3333.4444.5555.6666.7777.8888/MM  | 
    -| ''rightauth''      | Client authentication method               | eap-diameter                                                    | 
    -| ''rightsourceip''  | Source of destination addresses for the client gateway | [%epdg][%diameter]                                | 
    -| ''auto''           | Action on startup                          | start                                                           | 
    - 
    -**Example:** 
    -<code bash> 
    -conn epdg-eap-only 
    -        ike=aes256-sha256-sha1-prfsha256-prfsha1-modp2048-modp1024! 
    -        esp=aes256-sha256-sha1-modp2048-modp1024! 
    -        leftauth=eap 
    -        leftsubnet=10.0.0.0/8 
    -        rightauth=eap-diameter 
    -        rightsourceip=%epdg 
    -        auto=start 
    -</code>