Sign inSign up

ikunyyy/cisco-ipsec-socks

By ikunyyy

•Updated 11 months ago

Use strongswan to establish an IPsec connection; use gost to start a SOCKS service to proxy requests

Image
0

1.2K

ikunyyy/cisco-ipsec-socks repository overview

Create a container:

docker run -d \
  --name cisco-ipsec-socks \
  --cap-add=NET_ADMIN \
  --restart=always \
  -p 127.0.0.1:1080:1080 \
  -v ./ipsec.conf:/etc/ipsec.conf \
  -v ./ipsec.secrets:/etc/ipsec.secrets \
  ikunyyy/cisco-ipsec-socks

ipsec.conf:

config setup
    charondebug="ike 2, knl 2, cfg 2"
    uniqueids=no

conn cisco-vpn
    keyexchange=ikev1
    authby=xauthpsk
    xauth=client
    left=%defaultroute
    leftsourceip=%config
    leftauth=psk
    leftauth2=xauth
    
    # 
    leftid=<username>
    
    right=<remote server>
    rightauth=psk
    rightsubnet=0.0.0.0/0
    
    # 
    rightid=%any
    
    aggressive=no
    forceencaps=yes
    
    ike=aes128-sha1-modp1024,3des-sha1-modp1024,aes256-sha1-modp1024!
    esp=aes128-sha1,3des-sha1,aes256-sha1!
    
    auto=add

ipsec.secrets:

: PSK "<psk>"
<username> : XAUTH "<password>"

Tag summary

Content type

Image

Digest

sha256:0690bc428…

Size

15.1 MB

Last updated

11 months ago

docker pull ikunyyy/cisco-ipsec-socks