centos安装openswan

1. 开启路由和转发
egrep "ip_forward|rp_filter" /etc/sysctl.conf
确保如下结果
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 0


2. 禁用icmp重定向
sysctl -a | egrep "ipv4.*(accept|send)_redirects" | awk -F "=" '{print $1"= 0"}' >>/etc/sysctl.conf
sysctl -p


3. 关闭selinux
sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
setenforce 0
getenforce
关闭iptables或者开启iptables必要端口，注意要保存iptables配置
iptables -A INPUT -p udp --dport 500 -j ACCEPT
iptables -A INPUT -p udp --dport 4500 -j ACCEPT   
iptables -A INPUT -p tcp --dport 4500 -j ACCEPT
/etc/init.d/iptables save



4. 安装openswan
yum install openswan lsof -y
ipsec --version
启动ipsec
/etc/init.d/ipsec start
chkconfig ipsec --level 35 on
检查状态
ipsec verify

5.认证和配