Date: Sun, 1 Mar 2020 16:31:07 +0700 From: Victor Sudakov <vas@sibptus.ru> To: Sam Fourman <sfourman@gmail.com> Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Subject: Re: l2tp+IPsec client on FreeBSD, VPN gateway on Windows Message-ID: <20200301093107.GA93651@admin.sibptus.ru> In-Reply-To: <CAOFF%2BZ20HzOyjsjvHo0i0iycvnvGViAtD9kqGxs7RiMu10HvUw@mail.gmail.com> References: <20191217070332.GA32902@admin.sibptus.ru> <20191218161217.GA87036@admin.sibptus.ru> <CAOFF%2BZ20HzOyjsjvHo0i0iycvnvGViAtD9kqGxs7RiMu10HvUw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--EeQfGwPcQSOJBaQU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Sam Fourman wrote:
> I am also interested to see a working configuration, I need to connect a
> FreeBSD client to a Windows Server via L2TP+IPSEC pre-shared key.
I can't say for sure about the L2TP server, but the following config
works in my lab between a Windows 2016 server and FreeBSD/Strongswan:
conn Win2016
keyexchange =3D ikev1
ike=3D3des-sha1-modp2048!
esp=3D3des-sha1!
left=3D192.168.246.1
right=3D192.168.246.14
type=3Dtransport
authby=3Dpsk
auto=3Droute
In Windows policies, configure:
3DES+SHA1 (both for IKE and ESP), DH Group (for IKE) =3D high, PFS =3D off =
(keep unchecked).
--=20
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/
--EeQfGwPcQSOJBaQU
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQEcBAEBAgAGBQJeW4DbAAoJEA2k8lmbXsY03xkH/22ehbWebGvlmWIBYSDuTlCD
xhHTgc1MqJ2tO9JGM+wHSt/3CPP5FDxJtEX4TSAkx57cbB28sPoDo280zgx8Nn7Q
JAayaCondHLJEP0RckGwfSDxRyRuNp9kDkRDk7aWW0rTRRnHZUMiZfjEV3aUBVtW
TFbK/4ESqlVW1YAxJf/gaJXvQWrU+vJQP993bJU0ot652T8uk/+ER0/cJdbHg+nP
Uuf8SM7VQWh+bM9HL69MfDI2+CYbkDNDeRCTwk9rKH3X7c6vqVrRNxv89ytgLNAn
WbtgxdyFnPxAAAWLd6PLzuJ6IitOL/dXiVxk+j/d04nFaj5hKm6my3cP/px0fGs=
=J2oi
-----END PGP SIGNATURE-----
--EeQfGwPcQSOJBaQU--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20200301093107.GA93651>