Use strongswan to establish an IPsec connection; use gost to start a SOCKS service to proxy requests
1.2K
Create a container:
docker run -d \
--name cisco-ipsec-socks \
--cap-add=NET_ADMIN \
--restart=always \
-p 127.0.0.1:1080:1080 \
-v ./ipsec.conf:/etc/ipsec.conf \
-v ./ipsec.secrets:/etc/ipsec.secrets \
ikunyyy/cisco-ipsec-socks
ipsec.conf:
config setup
charondebug="ike 2, knl 2, cfg 2"
uniqueids=no
conn cisco-vpn
keyexchange=ikev1
authby=xauthpsk
xauth=client
left=%defaultroute
leftsourceip=%config
leftauth=psk
leftauth2=xauth
#
leftid=<username>
right=<remote server>
rightauth=psk
rightsubnet=0.0.0.0/0
#
rightid=%any
aggressive=no
forceencaps=yes
ike=aes128-sha1-modp1024,3des-sha1-modp1024,aes256-sha1-modp1024!
esp=aes128-sha1,3des-sha1,aes256-sha1!
auto=add
ipsec.secrets:
: PSK "<psk>"
<username> : XAUTH "<password>"
Content type
Image
Digest
sha256:0690bc428…
Size
15.1 MB
Last updated
11 months ago
docker pull ikunyyy/cisco-ipsec-socks