ti

网上下到的一个很详细介绍VPN基础知识的资料

#!/bin/sh
#
# RCSID $Id: ti,v 1.3 1999/04/06 04:54:35 rgb Exp $
#
# This script is OBSOLETE -- rgb, May 6th, 1998
# usage: ./addrt src srcmask dst dstmask edst spi
# usage: ./seti4 dst spi alg osrc odst
# usage: ./setah dst spi alg algdata
# usage: ./setesp dst spi alg iv key

# ALG=$1

tncfg attach ipsec0 eth0
ifconfig ipsec0 10.2.0.139 netmask 255.255.0.0
route add -net 10.1.0.0 netmask 255.255.0.0 dev ipsec0
# route add -net 10.1.0.0 netmask 255.255.0.0 gw fir-yellow

# forward path

../utils/addrt 10.3.0.0 255.255.0.0 10.1.0.0 255.255.0.0 10.2.0.143 113
echo sleeping after addrt
sleep 1

../utils/setsa 10.2.0.143 113 ip4 10.2.0.139 10.2.0.143
../utils/setsa 10.2.0.143 114 ah md5 66306630663031326630663066303132
../utils/setsa 10.2.0.143 115 esp 3des-md5 i 1000000000000001 6630663066303132
../utils/setsa 10.2.0.143 116 ah hmac-md5 66306630663031326630663066303132
../utils/setsa 10.2.0.143 117 ah hmac-sha1 66306630663031326630663066303132
../utils/setsa 10.2.0.143 118 esp des-md5 i 1000000000000001 6630663066303132
../utils/setsa 10.2.0.143 119 esp des-cbc 61626364 6630663066303132

# ../utils/spigrp 10.2.0.143 113 10.2.0.143 114 10.2.0.143 116 10.2.0.143 117 
../utils/spigrp 10.2.0.143 113 

../utils/setsa 10.2.0.139 105 esp des-md5 r -w 24 6630663066303132

# ../utils/seti4 10.2.0.143 113 1 10.2.0.139 10.2.0.143
# ../utils/setesp 10.2.0.143 115 4 66306630 6630663066303132
# ../utils/setespdm 10.2.0.143 115 ${ALG} 6630663066303132
# ../utils/setah 10.2.0.143 116 6 66306630663031326630663066303132

# ../utils/spigrp 10.2.0.143 113 10.2.0.143 115

# return path

# ../utils/setespdm 10.2.0.139 105 ${ALG} 6630663066303132
# ../utils/setesp 10.2.0.139 105 4 66306630 6630663066303132
# ../utils/setah 10.2.0.139 106 6 66306630663031326630663066303132

#
# $Log: ti,v $
# Revision 1.3  1999/04/06 04:54:35  rgb
# Fix/Add RCSID Id: and Log: bits to make PHMDs happy.  This includes
# patch shell fixes.
#
#