Strongswan-strongswan-psk

Auf beiden Seiten identisch

• cat /etc/ipsec.conf

conn s2s
     authby=secret
     keyexchange=ikev2
     left=192.168.252.89
     leftid=192.168.252.89
     leftsubnet=10.254.32.0/24
     right=192.168.252.200
     rightid=192.168.252.200
     rightsubnet=10.254.31.0/24
     ike=aes256-sha256-modp4096
     esp=aes256-sha256-modp4096
     ikelifetime = 3h
     lifetime = 1h
     auto=start

• cat /etc/ipsec.secrets

 192.168.252.89 192.168.252.200 : PSK "suxer"