搜了半天都没找到想要的答案,终于这篇的评论里的老哥给了我提示:https://blog.csdn.net/xingyeping/article/details/51745110
我用的strongSwan版本:5.6.2
两步:
1.根据strongSwan官网wiki,可以找到ipsec.conf详细说明页面,其中关于协商端口的字段如下:
left|rightikeport = <port>
UDP port the left participant uses for IKE communication. If unspecified, port 500 is used with the port
floating to 4500 if a NAT is detected or MOBIKE is enabled.
Specifying a local IKE port different from the default additionally requires a socket implementation that
listens to this port. Not supported for IKEv1 connections prior to