配置strongswan.conf vi /usr/local/etc/strongswan.conf # strongswan.conf - strongSwan configuration file # # Refer to the strongswan.conf(5) manpage for details # # Configuration changes should be made in the included files charon { load_modular = yes d
windows server 推荐使用ipsec修改防火墙设置,默认防火墙需要手动导入导出.wfw文件,需要手动添加单条规则,维护麻烦,推荐关闭,使用ipsec管理 以下是线上防火墙配置,可参照业务环境以及端口做对应修改win+r:输入secpol.msc,回车打开防火墙配置 REM 删除所有旧的静态策略 netsh ipsec static del all REM 创建一条策略 netsh ipsec static add policy name=Firewall REM 添加一个阻挡 Act