Пример структуры IKERule
IKETransform ike_trf_01(
LifetimeSeconds = 28800
CipherAlg = "G2814789CPRO1-K256-CBC-65534"
HashAlg = "GR341194CPRO1-65534"
GroupID = VKO_1B
)
IKETransform ike_trf_02(
LifetimeSeconds = 28800
CipherAlg = "G2814789CPRO1-K256-CBC-65534"
HashAlg = "GR341194CPRO1-65534"
GroupID = MODP_1536
)
IKETransform ike_trf_03(
LifetimeSeconds = 28800
CipherAlg = "DES-CBC"
HashAlg = "GR341194CPRO1-65534"
GroupID = MODP_1024
)
IKETransform ike_trf_04(
LifetimeSeconds = 28800
CipherAlg = "AES-K128-CBC"
HashAlg = "GR341194CPRO1-65534"
GroupID = MODP_768
)
IKERule ike_rule(
DoNotUseDPD = FALSE
DPDIdleDuration = 60
DPDResponseDuration = 5
DPDRetries = 3
MainModeAuthMethod *= auth_method_01
Transform *= ike_trf_01,ike_trf_02,ike_trf_03,ike_trf_04
DoAutopass = TRUE
)
IdentityEntry auth_identity_01(
)
AuthMethodPreshared auth_method_01(
SharedIKESecret = "dfd"
LocalID = auth_identity_01
)