IPsec использует OpenSwan вместо StrongSwan
Доброе утро, парень.
Я пытался установить безопасное соединение через IPsec (StrongSwan) между моим ПК и сервером с помощью этого учебного пособия. Я установил StrongSwan как на сервере, так и на ПК, IPsec отлично работает на моем ПК, но вместо OpenSwan он используется. StrongSwan
ipsec.old.service - LSB: Start Openswan IPsec at boot time
Loaded: loaded (/etc/init.d/ipsec.old; bad; vendor preset: enabled)
Active: active (exited) since Mi 2018-11-21 10:11:15 CET; 5s ago
Docs: man:systemd-sysv-generator(8)
Process: 6228 ExecStart=/etc/init.d/ipsec.old start (code=exited, status=0/SUCCESS)
Nov 21 10:11:15 pc-11226 systemd[1]: Starting LSB: Start Openswan IPsec at boot time...
Nov 21 10:11:15 pc-11226 systemd[1]: Started LSB: Start Openswan IPsec at boot time.
Это терпит неудачу на моем сервере, используя StrongSwan:
● strongswan.service - strongSwan IPsec IKEv1/IKEv2 daemon using ipsec.conf
Loaded: loaded (/lib/systemd/system/strongswan.service; enabled; vendor preset: enabled
Active: failed (Result: exit-code) since Mon 2018-11-19 12:35:30 UTC; 1 day 20h ago
Main PID: 1926 (code=exited, status=2)
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'ikelifetime'
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'keyingtries'
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'left' in conf
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'leftid' in co
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'leftsubnet' i
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'lifetime' in
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'right' in con
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: # unsupported keyword 'rightsubnet'
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: ### 15 parsing errors (15 fatal) ###
Nov 19 12:35:30 testserver-ipsec ipsec_starter[1926]: unable to start strongSwan -- fatal
IPsec.conf на моем сервере
# ipsec.conf - strongSwan IPsec configuration file
# basic configuration
config setup
strictcrlpolicy=no
uniqueids=yes
charondebug="all"
# Add connections here.
authby=secret
left=%defaultroute
leftid=192.168.10.243
leftsubnet=255.255.255.0
right=192.168.10.73
rightsubnet=255.255.255.0
ike=aes256-sha2_256-modp1024!
esp=aes256-sha2_256!
keyingtries=0
ikelifetime=1h
lifetime=8h
dpddelay=30
dpdtimeout=120
dpdaction=restart
auto=start
IPsec.conf на моем компьютере
# ipsec.conf - strongSwan IPsec configuration file
# basic configuration
config setup
charondebug="all"
strictcrlpolicy=no
uniqueids=yes
# Add connections here.
conn xfce-to-server
authby=secret
left=%defaultroute
leftid=192.168.10.73
leftsubnet=255.255.255.0
right=192.168.10.243
rightsubnet=255.255.255.0
ike=aes256-sha2_256-modp1024!
esp=aes256-sha2_256!
keyingtries=0
ikelifetime=1h
lifetime=8h
dpddelay=30
dpdtimeout=120
dpdaction=restart
auto=start
Если кому-то нужна дополнительная информация, пожалуйста, сообщите мне в комментариях.