第一步:安装openswan
yum install -y make gcc gmp-devel xmlto bison flex xmlto libpcap-devel lsof vim-enhanced man
yum install nss
yum install libreswan
第二步:配置
1. cat /etc/ipsec.conf
config setup
protostack=netkey
nat_traversal=yes
oe=off
dumpdir=/var/run/pluto/
virtual_private=%v4:10.0.0.0/8,%v4:192.168.8.0/24,%v4:172.16.0.0/16
conn net-net
ike=3des-