zoukankan      html  css  js  c++  java
  • 编译安装 openswan-2.6.34

     因为RHEL5.4 自带的OPENSWAN -2.6.21-5.el5无法生成RSA key

    (问题为 Error Generating a new ipsec hostkey  http://www.centos.org/forums/viewtopic.php?t=20620),

    所以源码安装openswan

    1  下载openswan:

    wget  http://www.openswan.org/download/openswan-2.6.34.tar.gz

    2  编译安装

    编译安装之前,先确保安装了 gcc kernel-devel kernel-header gmp gmp-devel gawk flex bison,

    tar  -zxvf   openswan-2.6.34.tar.gz
    make programs
    make install

    depmod  -a


    3  设置openswan运行所需的环境:

    vim  /etc/sysctl.conf

     net.ipv4.ip_forward=1

     net.ipv4.conf.default.rp_filer= 0


    settings for ipsec:
    vim ipsec_env_settings.sh
    #!/bin/bash

    for i in /proc/sys/net/ipv4/conf/*/send_redirects
    do
        echo "0" > $i
    done
    for i in /proc/sys/net/ipv4/conf/*/accept_redirects
    do
        echo "0" > $i
    done
    echo "1" > /proc/sys/net/ipv4/ip_forward
    echo "1" > /proc/sys/net/core/xfrm_larval_drop

    echo "0" > /selinux/enforce  #disable selinux

    4  启动IPSEC
    service ipsec start OR /etc/init.d/ipsec start

    5  验证运行是否正常

    ipsec  verify



  • 相关阅读:
    字符串匹配的KMP算法(转)
    二分查找谜题
    快排的优化--说说尾递归
    ZR提高失恋测4
    CF1209
    ZR普转提2
    ZR提高失恋测3
    ZR提高失恋测2(9.7)
    ZR9.8普转提
    CF1214
  • 原文地址:https://www.cnblogs.com/slips/p/3416087.html
Copyright © 2011-2022 走看看