This is an old revision of the document!

---

Description

This example demonstrates how to configure a Site-to-Site IPSec VPN with Strongswan. The example was tested and verified using Fedora VMs in GNS3.

Install

dnf install -y strongswan

Network

VPN-Site-1

nmcli connection add ifname ens4 connection.id wan connection.type 802-3-ethernet mtu 1460 ipv4.method manual ipv4.address 100.64.20.1/30
nmcli connection add ifname ens5 connection.id lan connection.type 802-3-ethernet ipv4.method manual ipv4.address 192.168.80.1/24 mtu 1460

VPN-Site-2

nmcli connection add ifname ens4 connection.id wan connection.type 802-3-ethernet mtu 1460 ipv4.method manual ipv4.address 100.64.20.2/30
nmcli connection add ifname ens5 connection.id lan connection.type 802-3-ethernet ipv4.method manual ipv4.address 192.168.90.1/24 mtu 1460

VPN

Links

• https://www.strongswan.org/testing/testresults/ikev2/rw-cert/
• http://www.remy.org.uk/tech.php?tech=1483382049