blob: b5286320a730b226fb59a402ef386edc99d7a782 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
#!/usr/sbin/setkey -f
#I am 200.200.200.10
flush;
spdflush;
# ESP SAs doing encryption using 192 bit long keys (168 + 24 parity)
# and hmac-sha2-256 authentication using 256 bit long keys
add 200.200.200.10 200.200.200.20 esp 0x10513
-E 3des-cbc 0x7aeaca3f87d060a12f4a4487d5a5c3355920fae69a96c831
-A hmac-sha2-256 0x4de03bebf6beb4fdef5a67d349a09580466cc4e54503333b2a5fd34538c91198;
add 200.200.200.20 200.200.200.10 esp 0x10514
-E 3des-cbc 0xf6ddb555acfd9d77b03ea3843f2653255afe8eb5573965df
-A hmac-sha2-256 0x5e01eb780b7ecc074ca2ca4fa4a5ea2ff841c977da0ce61c49d1fe767ea5452c;
spdadd 200.200.200.20 200.200.200.10 any -P in ipsec
esp/transport//require;
spdadd 200.200.200.10 200.200.200.20 any -P out ipsec
esp/transport//require;
|