Step 2: Installing strongSwan in CentOS 8ĥ. Then restart the network manager to apply the new changes. # vi /etc/sysconfig/network-scripts/route-eth0Īdd the following line in the file. Next, create a permanent static route in the file /etc/sysconfig/network-scripts/route-eth0 on both security gateways. After saving the changes in the file, run the following command to load the new kernel parameters in runtime. Start by enabling kernel IP forwarding functionality in /etc/nf configuration file on both VPN gateways. Step 1: Enabling Kernel IP Forwarding in CentOS 8ġ. Testing Environmentĭo not forget to use your real-world IP addresses during the configurations while following the guide. A site-to-site setup means each security gateway has a sub-net behind it. This enables peers to authenticate each other using a strong pre-shared key ( PSK). In this article, you will learn how to set up site-to-site IPsec VPN gateways using strongSwan on CentOS/RHEL 8 servers. Related Article: How to Set Up IPsec-based VPN with Strongswan on Debian and Ubuntu It is full-featured, modular by design and offers dozens of plugins that enhance the core functionality.

StrongSwan is an open-source, multi-platform, modern and complete IPsec-based VPN solution for Linux that provides full support for Internet Key Exchange (both IKEv1 and IKEv2) to establish security associations (SA) between two peers.

Fortinet vpn client fedora