home *** CD-ROM | disk | FTP | other *** search
/ OS/2 Shareware BBS: 35 Internet / 35-Internet.zip / ijfire14.zip / ipsec.cf_ < prev    next >
Text File  |  2000-03-03  |  4KB  |  114 lines
  1. ;-----------------------------------------------------------------------------
  2. ; IPSEC.CFG
  3. ;-----------------------------------------------------------------------------
  4. ;
  5. ; Location.:  Workdir of host product
  6. ;
  7. ; Purpose..:  Define Security Association (SA) bundles for use
  8. ;             with the IPSec PlugIn.
  9. ;
  10. ; Syntax...:  An SA bundle section begins with a section name 
  11. ;             (in brackets)  and ends with two empty brackets "[]".
  12. ;
  13. ;             For security reasons, you must use numeric IP addresses
  14. ;             and not host names.
  15. ;
  16. ;             Lines starting with ';' denote a comment.
  17. ;
  18. ; Help.....:  IPSec Reference Manual
  19. ;
  20. ; Errors...:  Written to 'IPSEC.LOG' in the workdir
  21. ;_____________________________________________________________________________
  22.  
  23.  
  24.  
  25. ;-----------------------------------------------------------------------------
  26. ;                                          
  27. ;   SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE     
  28. ;                                                                             
  29. ;      Transport mode connection between two hosts.
  30. ;                                                                             
  31. ;-----------------------------------------------------------------------------
  32.  
  33.  
  34. [transport]
  35. mode = transport
  36. local  = 195.97.1.40        ; our host
  37. remote = 195.97.1.1        ; remote host
  38. ah = yes            ; ah required
  39. esp = yes            ; esp required
  40. reinit = yes                    ; IKE negotiations on startup
  41. []
  42.  
  43.  
  44.  
  45. ;-----------------------------------------------------------------------------
  46. ;                                          
  47. ;   SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE     
  48. ;                                                                             
  49. ;      Simple VPN case. Two intranets behind gateways.
  50. ;                                                                             
  51. ;-----------------------------------------------------------------------------
  52.  
  53.  
  54. [simpleVPN]
  55. mode = tunnel
  56. local  = 195.97.1.1        ; our gateway
  57. localnet = 192.168.3.0          ; local net
  58. localmask = 255.255.255.0       ; local mask
  59. remote = 194.96.1.1        ; remote gateway
  60. remotenet = 192.168.2.0       ; remote net
  61. remotemask = 255.255.255.0       ; remote mask
  62. ah = yes            ; ah required
  63. esp = yes            ; esp required
  64. reinit = yes                    ; IKE negotiations on startup
  65. []
  66.  
  67.  
  68.  
  69. ;-----------------------------------------------------------------------------
  70. ;                                          
  71. ;   SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE     
  72. ;                                                                             
  73. ;      Road Warrior case. 
  74. ;
  75. ;      Local end is a Road Warrior (e.g. InJoy Dialer with dynamic IP). 
  76. ;
  77. ;      Remote end is an IPSec gateway.
  78. ;                                                                             
  79. ;-----------------------------------------------------------------------------
  80.  
  81. [RoadWarrior]
  82. mode = tunnel
  83. local  = 0.0.0.0        ; our host is road warrior
  84. remote = 195.97.1.1        ; remote gateway
  85. remotenet = 192.168.2.0       ; remote net
  86. remotemask = 255.255.255.0       ; remote mask
  87. ah = yes
  88. esp = yes
  89. reinit = yes
  90. []
  91.  
  92.  
  93.  
  94. ;-----------------------------------------------------------------------------
  95. ;                                          
  96. ;   SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE SAMPLE     
  97. ;                                                                             
  98. ;      IPSec gateway accepting remote Road Warriors
  99. ;      (e.g. remote InJoy Dialers)
  100. ;                                                                             
  101. ;-----------------------------------------------------------------------------
  102.  
  103. [RWgateway]
  104. mode = tunnel
  105. local  = 195.97.1.1        ; our gateway
  106. localnet = 192.168.2.0          ; local net
  107. localmask = 255.255.255.0       ; local mask
  108. remote = 0.0.0.0        ; all RWs share same secret
  109. ah = yes
  110. esp = yes
  111. reinit = no
  112. []
  113.  
  114.