firewall-cmd --permanent --add-service="ipsec"
firewall-cmd --permanent --add-port=4500/udp
firewall-cmd --permanent --add-masquerade
firewall-cmd --reload
PS.
手上VPS内存不足1G无法运行CentOS 7,打算架设IPSec...
https://www.vultr.com/docs/using-strongswan-for-ipsec-vpn-on-centos-7
另外问下那种VPN适合国情??
...