9232f4bb7fb0daa7b3909a61bd202853b962761a
gre-plus-ipsec-debian.md
| ... | ... | @@ -0,0 +1,19 @@ |
| 1 | +# GRE + IPsec on Debian based distros |
|
| 2 | + |
|
| 3 | +* Install racoon from ipsec-tools. |
|
| 4 | +* Define an IPsec security policy in /etc/ipsec-tools.conf |
|
| 5 | +* Load the IPsec security policy into the IPsec security policy database. |
|
| 6 | +* Configure the racoon daemon. |
|
| 7 | +* Configure a GRE tunnel. |
|
| 8 | + |
|
| 9 | +## Used resources in this example: |
|
| 10 | +* tunnel endpoints: 1.2.3.4 and 5.6.7.8 |
|
| 11 | +* internal IPv4 addresses: 10.0.0.1 and 10.0.0.2 |
|
| 12 | + |
|
| 13 | +## Define an IPsec security policy |
|
| 14 | +Example policy on 1.2.3.4: |
|
| 15 | +``` |
|
| 16 | +#!/usr/sbin/setkey -f |
|
| 17 | +spdadd 1.2.3.4 5.6.7.8 gre -P out ipsec esp/transport//require; |
|
| 18 | +spdadd 5.6.7.8 1.2.3.4 gre -P in ipsec esp/transport//require; |
|
| 19 | +``` |
|
| ... | ... | \ No newline at end of file |