#!/bin/sh## RCSID $Id: 103,v 1.1.1.1 2002/09/05 03:13:18 ken Exp $#net1=192.168.3.0net2=192.168.1.0gw1=192.168.2.100gw2=192.168.2.103hmask=255.255.255.255nmask=255.255.255.0depmod -amodprobe ipsectncfg attach ipsec0 eth0ifconfig ipsec0 $gw1## Transport mode##route del $gw2#route add -net $gw2 dev ipsec0##addrt $gw1 $hmask \#	$gw2 $hmask \#	$gw2 125##setsa $gw1 135 esp 3des-md5-96 r \#	1000000000000001 6630663066303133#setsa $gw2 125 esp 3des-md5-96 i \#	1000000000000001 6630663066303132## Tunnel mode#route del $net2route add -net $net2 dev ipsec0 gw $gw2# forward pathaddrt $net1 $nmask $net2 $nmask $gw2 103echo sleeping after addrtsleep 1setsa $gw2 103 ip4 $gw1 $gw2setsa $gw2 105 esp des-cbc 66306630 6630663066303132setsa $gw2 106 ah md5 66306630663031326630663066303132spigrp $gw2 103 $gw2 105 $gw2 106# return pathsetsa $gw1 115 esp des-cbc 66306630 6630663066303132setsa $gw1 116 ah md5 66306630663031326630663066303132cat /proc/net/ipsec-spiechocat /proc/net/ipsec-route## $Log: 103,v $# Revision 1.1.1.1  2002/09/05 03:13:18  ken# 1.98b## Revision 1.2  1999/04/06 04:54:32  rgb# Fix/Add RCSID Id: and Log: bits to make PHMDs happy.  This includes# patch shell fixes.##