Добрый день. Подскажите пожалуйста что писать в конфиги strongswan и ipsec в таком случае.
Ниже требования оператора связи для создания защищённого соединения. Я пробовал различные варианты конфигов, в интернете их много. Туннель не поднимается, а время поджимает.
--------------------------------------------------------------------------------------
VPN peer gateway            |    здесь внешний ip их Cisco                    
--------------------------------------------------------------------------------------
IKE Parameters (Phase 1)                                                              
--------------------------------------------------------------------------------------
IKE version                |    Ikev2                                        
Authentication Method            |    Preshared key                                
Key Exchange encryption            |    AES-256                                      
Data Integrity                |    SHA                                          
Diffie-Hellman Group (phase 1)    |    Group 14                                      
Timer IKE phase 1        |    86400                                        
pseudo-random function (prf)    |    sha256 sha                                    
Type                |    Main mode                                    
--------------------------------------------------------------------------------------
IPSec SA Parameters (Phase 2)                                                        
--------------------------------------------------------------------------------------
UDP encapsulation        |    Yes                                          
Protocol            |    ESP                                          
IPSEC                |    AES-256                                      
Data Integrity            |    AES-256                                      
Diffie-Hellman Group        |    PFS Group 14                                  
Transform-set            |    esp-aes-256 esp-sha-hmac (AES256-SHA)        
Timer IKE phase 2        |    3600                                          
Traffic Initiator        |    V                                            
Encryption Domain        |    Тут три ip из пула внутренней сети оператора  
--------------------------------------------------------------------------------------