M
M
Michael_Goldberg2022-03-14 13:27:59
VPN
Michael_Goldberg, 2022-03-14 13:27:59

How to connect windows to running server with strongswan vpn?

The server itself works on debian, vpn connects to android through the application. On Windows it is not clear what to do where.
Here is the config:

config setup
        uniqueids=never
        charondebug="ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2,  mgr 2"

conn %default
        keyexchange=ikev2
        ike=aes128gcm16-sha2_256-prfsha256-ecp256!
        esp=aes128gcm16-sha2_256-ecp256!
        fragmentation=yes
        rekey=no
        compress=yes
        dpdaction=clear
        left=%any
        leftauth=pubkey
        leftsourceip=185.253.44.4
        leftid=185.253.44.4
        leftcert=debian.pem
        leftsendcert=always
        leftsubnet=0.0.0.0/0
        right=%any
        rightauth=pubkey
        rightsourceip=10.10.10.0/24
        rightdns=8.8.8.8,8.8.4.4

conn ikev2-pubkey
        auto=add

Here is iptables:
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 3333 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p udp -m udp --dport 500 -j ACCEPT
-A INPUT -p udp -m udp --dport 4500 -j ACCEPT
-A INPUT -j DROP
-A FORWARD -s 10.10.10.0/24 -m policy --dir in --pol ipsec --proto esp -j ACCEPT
-A FORWARD -d 10.10.10.0/24 -m policy --dir out --pol ipsec --proto esp -j ACCEPT
-A FORWARD -j DROP

Answer the question

In order to leave comments, you need to log in

1 answer(s)
C
CityCat4, 2022-03-14
@CityCat4

See my answer in the comments to the question here . There is a link to an article in which it is just written about connecting Windows to a shvan according to certificates.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question