strongSwan

h1. IKEv1 Configuration Examples

h2. Remote Access

|RSA authentication with X.509 certificates         |{{tc_dr(ikev1/rw-cert,IPv4)}}            |{{tc(ipv6/rw-ikev1,IPv6)}} |{{tc_dr(ikev1/nat-rw,NAT)}} |

|PSK authentication with pre-shared keys            |{{tc_dr(ikev1/rw-psk-ipv4,IPv4)}}        |{{tc(ipv6/rw-psk-ikev1,IPv6)}} | |

|RSA with XAUTH authentication                      |{{tc_dr(ikev1/xauth-rsa,IPv4)}}          | | |

|PSK with XAUTH authentication                      |{{tc_dr(ikev1/xauth-psk,IPv4)}}          | | |

|Hybrid RSA (server) / XAUTH (client) authentication|{{tc_dr(ikev1/xauth-id-rsa-hybrid,IPv4)}}| | |

h2. Remote Access with Virtual IP Adresses

|DB-based server-side virtual IP pool                  |{{tc_dr(ikev1/ip-pool-db,IPv4)}}         |

|Static server-side virtual IP addresses               |{{tc_dr(ikev1/config-payload,IPv4)}}     |

|Static server-side virtual IP addresses in push mode  |{{tc_dr(ikev1/config-payload-push,IPv4)}}|

|Static client-side virtual IP addresses               |{{tc_dr(ikev1/virtual-ip,IPv4)}}         |

|RSA with XAUTH authentication and virtual IP addresses|{{tc_dr(ikev1/xauth-id-rsa-config,IPv4)}}|

|PSK with XAUTH authentication and virtual IP addresses|{{tc_dr(ikev1/xauth-id-psk-config,IPv4)}}|

h2. Site-to-Site

|RSA authentication with X.509 certificates|{{tc_dr(ikev1/net2net-cert,IPv4)}}|{{tc(ipv6/net2net-ikev1,IPv6)}} |

|PSK authentication with pre-shared keys   |{{tc_dr(ikev1/net2net-psk,IPv4)}} | |

h2. Host-to-Host

|IPsec tunnel mode with X.509 certificates   |{{tc_dr(ikev1/host2host-cert,IPv4)}}     |{{tc(ipv6/host2host-ikev1,IPv6)}} |

|IPsec transport mode with X.509 certificates|{{tc_dr(ikev1/host2host-transport,IPv4)}}|{{tc(ipv6/transport-ikev1,IPv6)}} |

h2. Complete List

{{tc_dr(ikev1,All IKEv1 test scenarios)}}