Microsoft Azure configuration: Difference between revisions

From Libreswan
Jump to navigation Jump to search
(Created page with " Azure IKEv2 (Route Based GW) Subnet to Subnet connection with libreswan using PSK Example  Contributed by Amir Naftali of Fortycloud <pre> conn conn2AzureRouteBasedGW  ...")
 
No edit summary
 
Line 6: Line 6:
<pre>
<pre>
conn conn2AzureRouteBasedGW
conn conn2AzureRouteBasedGW
    authby=secret
        authby=secret
    auto=start
        auto=start
    dpdaction=restart_by_peer
        dpdaction=restart
    dpddelay=30
        dpddelay=30
    dpdtimeout=120
        dpdtimeout=120
    forceencaps=yes # not a must
        forceencaps=yes # not a must
    ike=aes256-sha1;modp1024
        ike=aes256-sha1;modp1024
    ikelifetime=10800s
        ikelifetime=10800s
    ikev2=yes
        ikev2=yes
    keyingtries=3
        keyingtries=3
    left=%defaultroute
        left=%defaultroute
    leftid=<MY PUBLIC IP>
        leftid=<MY PUBLIC IP>
    leftsubnets=<Azure Local Network Gateway Subnets>
        leftsubnets=<Azure Local Network Gateway Subnets>
    pfs=yes
        pfs=yes
    phase2alg=aes128-sha1
        phase2alg=aes128-sha1
    right=<Azure Route Based GW IP>
        right=<Azure Route Based GW IP>
    rightid=<Azure Route Based GW IP>
        rightid=<Azure Route Based GW IP>
    rightsubnets=<vNet Subnet>
        rightsubnets=<vNet Subnet>
    salifetime=3600s
        salifetime=3600s
    type=tunnel
        type=tunnel


</pre>
</pre>

Latest revision as of 17:52, 3 August 2016

Azure IKEv2 (Route Based GW) Subnet to Subnet connection with libreswan using PSK Example 

Contributed by Amir Naftali of Fortycloud

conn conn2AzureRouteBasedGW
        authby=secret
        auto=start
        dpdaction=restart
        dpddelay=30
        dpdtimeout=120
        forceencaps=yes # not a must
        ike=aes256-sha1;modp1024
        ikelifetime=10800s
        ikev2=yes
        keyingtries=3
        left=%defaultroute
        leftid=<MY PUBLIC IP>
        leftsubnets=<Azure Local Network Gateway Subnets>
        pfs=yes
        phase2alg=aes128-sha1
        right=<Azure Route Based GW IP>
        rightid=<Azure Route Based GW IP>
        rightsubnets=<vNet Subnet>
        salifetime=3600s
        type=tunnel