[Swan] Create multi encryption domain via ipsec whack command

Uday Raj mailme.linuz at rediffmail.com
Mon Oct 3 17:51:33 EEST 2022



From: "Uday Raj"<mailme.linuz at rediffmail.com>
Sent: Mon, 03 Oct 2022 20:14:44
To: <swan at lists.libreswan.org>
Subject: Create multi encryption domain via ipsec whack command

Hello team, I am creating a multi encryption domain in ipsec via the below command. But the below command is throwing error ? Could you please let me know how to create a MED in ipsec via whack commands.Command:
/usr/ipsec whack --name Tunnel1 --encrypt --tunnel --pfs --delete  --psk  \
    --host 10.0.15.251 --client 10.0.15.251/32 --id 10.0.15.251 \
    --updown "ipsec _updown" \
    --to \
    --host 10.10.0.1 --client {10.10.0.1/32,10.196.90.128/31} --id 10.10.0.1 \
    --updown "ipsec _updown" \
    --ike "aes192,3des" --esp "aes192,3des" \
    --ikelifetime 3600 \
    --ipseclifetime 28800 --rekeywindow 540 --keyingtries 10 --ikev1-allowThanks in Advance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20221003/f1cb3139/attachment.htm>


More information about the Swan mailing list