ipsec配置strongswan.conf和ipsec.conf

配置strongswan.conf

vi /usr/local/etc/strongswan.conf

strongswan.conf - strongSwan configuration file

Refer to the strongswan.conf(5) manpage for details

Configuration changes should be made in the included files

charon {
load_modular = yes
duplicheck.enable = no
compress = yes
plugins {
include strongswan.d/charon/.conf
}
dns1 = 8.8.8.8
dns2 = 8.8.4.4
nbns1 = 8.8.8.8
nbns2 = 8.8.4.4
}
include strongswan.d/.conf

配置ipsec.conf

vi /usr/local/etc/ipsec.conf

config setup
uniqueids=never

conn android_xauth_psk
keyexchange=ikev1
left=%defaultroute
leftauth=psk
leftsubnet=0.0.0.0/0
right=%any
rightauth=psk
rightauth2=xauth
rightsourceip=10.31.2.0/24
auto=add

配置ipsec.secrets

vi /usr/local/etc/ipsec.secrets

RSA server.pem

PSK "key"

XAUTH "key"
user %any : EAP "password"