=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/etc/Attic/ipsec.conf,v retrieving revision 1.3 retrieving revision 1.4 diff -c -r1.3 -r1.4 *** src/etc/Attic/ipsec.conf 2006/08/24 12:23:30 1.3 --- src/etc/Attic/ipsec.conf 2006/08/24 12:47:37 1.4 *************** *** 1,4 **** ! # $OpenBSD: ipsec.conf,v 1.3 2006/08/24 12:23:30 hshoexer Exp $ # # See ipsec.conf(5) for syntax and examples. --- 1,4 ---- ! # $OpenBSD: ipsec.conf,v 1.4 2006/08/24 12:47:37 hshoexer Exp $ # # See ipsec.conf(5) for syntax and examples. *************** *** 8,17 **** # second between the machines 192.168.3.1 and 192.168.3.2. # Use FQDNs as IDs. ! ike esp from 10.1.1.0/24 to 10.1.2.0/24 peer 192.168.3.2 \ ! srcid me.mylan.net dstid the.others.net ! ike esp from 192.168.3.1 to 192.168.3.2 \ ! srcid me.mylan.net dstid the.others.net # Set up a tunnel using static keying: # --- 8,17 ---- # second between the machines 192.168.3.1 and 192.168.3.2. # Use FQDNs as IDs. ! #ike esp from 10.1.1.0/24 to 10.1.2.0/24 peer 192.168.3.2 \ ! # srcid me.mylan.net dstid the.others.net ! #ike esp from 192.168.3.1 to 192.168.3.2 \ ! # srcid me.mylan.net dstid the.others.net # Set up a tunnel using static keying: # *************** *** 20,26 **** # and aesctr for encryption. hmac-sha2-256 uses a 256-bit key; aesctr # a 160-bit key. ! flow esp from 192.168.7.0/24 to 192.168.8.0/24 peer 192.168.3.2 ! esp from 192.168.3.1 to 192.168.3.2 spi 0xdeadbeef:0xbeefdead \ ! authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa:0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ ! enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee:0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee --- 20,26 ---- # and aesctr for encryption. hmac-sha2-256 uses a 256-bit key; aesctr # a 160-bit key. ! #flow esp from 192.168.7.0/24 to 192.168.8.0/24 peer 192.168.3.2 ! #esp from 192.168.3.1 to 192.168.3.2 spi 0xdeadbeef:0xbeefdead \ ! # authkey 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa:0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa \ ! # enckey 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee:0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee