CentOS 6安装Cisco ipsec运行不起来...

Ruclinux

我执行 racoon －F

Foreground mode.
2015-06-07 00:12:35: ERROR: racoon: MLS support is not enabled.
2015-06-07 00:12:35: INFO: @(#)ipsec-tools 0.8.0 (http://ipsec-tools.sourceforge.net)
2015-06-07 00:12:35: INFO: @(#)This product linked OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 (http://www.openssl.org/)
2015-06-07 00:12:35: INFO: Reading configuration from "/etc/racoon/racoon.conf"
2015-06-07 00:12:35: INFO: Resize address pool from 0 to 100

我的IPTABLS规则

iptables -I INPUT -p udp --dport 500 -j ACCEPT
iptables -I INPUT -p udp --dport 4500 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.100.100/24 -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 10.211.55.64/24 -o eth0 -j MASQUERADE
iptables -A FORWARD -s 192.168.100.100/24 -j ACCEPT
iptables -A FORWARD -s 10.211.55.64/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.100.100/24 -j SNAT --to-source $ip
iptables -t nat -A POSTROUTING -s 10.211.55.64/24 -j SNAT --to-source $ip
service iptables save
service iptables restart
chkconfig racoon on
service racoon restart

我本地配置如楼下一图. 可是我无法连接服务端. 不知道问题出在哪.
Cisco 兼容 V***P***N （v***p***nc）
IPsec based V****P***N

两种模式，我应该用哪种模式创建本地客户端？ 谢谢大家了.

Ruclinux

Screenshot.png (33.18 KB, 下载次数: 0)

2015-6-7 08:18 上传

点击文件名下载附件