fortinet vpn client IPSEC L2PT shrew client

por | 26 marzo, 2018

install arch:
yaourt qikec

note: yaourt shrew (client gui vpn is not working, so manual mode )

 

convert psk to base64 for example

12345678 to base64    ->  MTIzNDU2Nzg5MA==

b:auth-mutual-psk:MTIzNDU2Nzg5MA==  

https://www.base64decode.org/

 

put configuration file .ike/sites

n:version:4
n:network-ike-port:500
n:network-mtu-size:1380
n:client-addr-auto:1
n:network-natt-port:4500
n:network-natt-rate:15
n:network-frag-size:540
n:network-dpd-enable:1
n:network-notify-enable:1
n:client-banner-enable:0
n:client-dns-used:0
b:auth-mutual-psk:XXXXXXXXXXXXXXXXXXXXXX  <-- PresharedKey in base64
n:phase1-dhgroup:5
n:phase1-keylen:0
n:phase1-life-secs:86400
n:phase1-life-kbytes:0
n:vendor-chkpt-enable:0
n:phase2-keylen:0
n:phase2-pfsgroup:5
n:phase2-life-secs:3600
n:phase2-life-kbytes:0
n:policy-nailed:0
n:policy-list-auto:1
s:network-host:X.X.X.X  <-----vpn server IP 
s:client-auto-mode:pull
s:client-iface:virtual
s:network-natt-mode:enable
s:network-frag-mode:enable
s:auth-method:mutual-psk-xauth
s:ident-client-type:address
s:ident-server-type:any
s:phase1-exchange:aggressive
s:phase1-cipher:auto
s:phase1-hash:sha1
s:phase2-transform:auto
s:phase2-hmac:sha1
s:ipcomp-transform:disabled
s:policy-level:auto

use

qikec -r myvpn