I have created two virtualbox ubuntu clones for the purpose of setting up a test strongswan ipsec network; I'm trying to follow this guide. The virtualbox machines are on a bridged adapter and i verify that they can connect by pinging to the ip of each other, which suceeds
Basically i've created a net-net configuration as described in the documentation, On left machine, i replace
right in ipsec.conf with the ip shown when running
ifconfig on right machine and viceversa on right.
(As a brief side-comment, i want to use a private secret shared by safe channels, i presume that this implies a symmetric key encryption scheme, since anything regarding a public key would be somewhat less secure, and to be clear enough, this is an issue for countries where governments will tap all your connections, so MITM is a real problem. So if my understanding is wrong, please feel free to clarify)
back to the technical problem, in moon, i created a /etc/ipsec.d/moonKey.pem file that contains a secret string and then in /etc/ipsec.secrets:
: RSA moonKey.pem
with no passphrase, since the string in moonKey.pem is in cleartext
Similarly, in sun i've created a /etc/ipsec.d/sunKey.pem file that contains the same secret string as in moon. *I am assuming that these will be the PSK
I then run
sudo ipsec restart and i don't get errors, but pinging the whole 10.2.0.0 subnet from moon i don't get any response, and similarly from sun, so it seems the setup didn't suceed
any ideas what i might be doing wrong? or how to debug this issue?
btw, i wanted to create these tags but i don't have enough rep yet:
strongswan private-shared-key ubuntu-10.10