Dell EqualLogic PS6210XS EqualLogic Group Manager Administrator s Guide PS Ser - Page 82

Figure 12. Tunnel Mode Between Linux Hosts Using Certificate-Based Authentication iSCSI Initiator Configuration (IPv4) This example uses the following configuration: • Mint 17 (also known as Qiana) • Linux Kernel 3.13.0-36-generic, x86_64 • strongSwan 5.1.2 The following configuration files are relevant: • /etc/strongswan.conf is the configuration file that governs the operation of the strongSwan components (for example, debugging level, log file locations, and so on). You will not need to modify this file. • /etc/ipsec.conf is the configuration file for IPsec that contains parametric information about the local host and the "peer" hosts that are configured to use IPsec. • /etc/ipsec.secrets contains shared secrets (pre-shared keys). • /etc/ipsec.d/cacerts/* contains Certificate Authority certificates. • /etc/ipsec.d/certs/* contains intermediate and end-node certificates. NOTE: Other directories within /etc/ipsec.d can hold certificate revocation lists and other kinds of special certificates, but they are not discussed here. Initially, ipsec.conf contains exactly the following text: # ipsec.conf - strongSwan IPsec configuration file # basic configuration config setup # strictcrlpolicy=yes # uniqueids = no # Add connections here. # Sample VPN connections # conn sample-self-signed # leftsubnet=10.1.0.0/16 82 About Group-Level Security