Я сделал конфигурацию racoon в здесь топология
И я настроил racoon левого сервера и правого сервера.
Левый сервер /etc/racoon/racoon.conf конфигурация:
remote 1001::2 {
exchange_mode main,aggressive;
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group 2;
}
# generate_policy off;
}
#
sainfo address 2001:123::/64[any] any address 2002:123::/64[any] any {
pfs_group 2;
encryption_algorithm 3des;
authentication_algorithm hmac_md5;
compression_algorithm deflate;
}
левый сервнер /etc/racoon/psk.txt конфигурация:
1001::2 P@ssworD
Левый сервер /etc/ipsec-tools.conf, конфигурация:
flush;
spdflush;
## Some sample SPDs for use racoon
#
spdadd 2001:123::/64 2002:123::/64 any -P out ipsec
esp/tunnel/1001::1-1001::2/require;
#
spdadd 2002:123::/64 2001:123::/64 any -P in ipsec
esp/tunnel/1001::2-1001::1/require;
Правый сервер также по-другому устанавливает IP-адрес, и отображается следующая ошибка.
Feb 27 10:24:04 security-appliance racoon[13697]: ERROR: privsep_bind (Cannot assign requested address) = -1
Feb 27 10:24:04 security-appliance racoon[13697]: [2001:123::] ERROR: failed to bind to address 2001:123::[4500] (Cannot assign requested address).
Feb 27 10:55:52 security-appliance racoon[13697]: ERROR: privsep_bind (Cannot assign requested address) = -1
Feb 27 10:55:52 security-appliance racoon[13697]: [2001:123::] ERROR: failed to bind to address 2001:123::[500] (Cannot assign requested address).
Feb 27 10:55:52 security-appliance racoon[13697]: ERROR: privsep_bind (Cannot assign requested address) = -1
Feb 27 10:55:52 security-appliance racoon[13697]: [2001:123::] ERROR: failed to bind to address 2001:123::[4500] (Cannot assign requested address).
Feb 27 10:57:49 security-appliance racoon[13697]: ERROR: privsep_bind (Cannot assign requested address) = -1
Feb 27 10:57:49 security-appliance racoon[13697]: [2001:123::] ERROR: failed to bind to address 2001:123::[500] (Cannot assign requested address).
Feb 27 10:57:49 security-appliance racoon[13697]: ERROR: privsep_bind (Cannot assign requested address) = -1
Feb 27 10:57:49 security-appliance racoon[13697]: [2001:123::] ERROR: failed to bind to address 2001:123::[4500] (Cannot assign requested address).
Как я могу отправить ICMP6 компьютера 2001: 123 :: / 64 на 2002: 123 :: / 64 компьютер?
Маршрут IPv6 на левом сервере:
~# ip -6 route add 2002:123::/64 via 1001::2
Маршрут IPv6 на правом сервере:
~# ip -6 route add 2001:123::/64 via 1001::1