27.2.6.2. Zabezpečení jednoduchého spojení

FIXME:

Příklad 27.7. yoghurt:ipsec2.conf

#!/usr/sbin/setkey -f
# yoghurt:/etc/racoon/ipsec.conf
# Spojeni s pikachu

# Flush all
flush;
spdflush;

# Security Association (SA) {source destination instruction} for AH
add 212.96.165.122 212.96.165.121 ah 15700 -A hmac-md5 "1234567890123456";
add 212.96.165.121 212.96.165.122 ah 24500 -A hmac-md5 "1234567890123456";

# Security Association for ESP
add 212.96.165.122 212.96.165.121 esp 15701 -E 3des-cbc "123456789012123456789012";
add 212.96.165.121 212.96.165.122 esp 24501 -E 3des-cbc "123456789012123456789012";

# Secure Policy
spdadd 212.96.165.121 212.96.165.122 any -P out ipsec
        esp/transport//require
        ah/transport//require;
spdadd 212.96.165.122 212.96.165.121 any -P in ipsec
        esp/transport//require
        ah/transport//require;