[Swan-dev] Create multi encryption domain through ipsec whack commands

Uday Raj mailme.linuz at rediffmail.com
Mon Oct 3 10:26:19 EEST 2022


Hello team, 

I am creating a multi encryption domain in ipsec via the below command. But the command is throwing error ? 
Could you please let me know how to create a MED in ipsec via whack commands.

Command:/usr/ipsec whack --name T.NORG --encrypt --tunnel --pfs --delete  --psk  \
    --host 10.0.15.251 --client 10.0.15.251/32 --id 10.0.15.251 \
    --updown "ipsec _updown" \
    --to \
    --host 10.10.0.1 --client {10.10.0.1/32,10.196.90.128/31} --id 10.10.0.1 \
    --updown "ipsec _updown" \
    --ike "aes192,3des" --esp "aes192,3des" \
    --ikelifetime 3600 \
    --ipseclifetime 28800 --rekeywindow 540 --keyingtries 10 --ikev1-allow/sbin

Thanks in Advance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20221003/33e400bd/attachment.htm>


More information about the Swan-dev mailing list