From 03a8db740f78fb85664e38f874454fcd929f85fa Mon Sep 17 00:00:00 2001 From: toby Date: Wed, 31 Oct 2018 23:15:54 +0100 Subject: [PATCH] for now keeping the ikev1, the upgrade to v2 needs to be planned --- files/ipsec.conf.wit | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/files/ipsec.conf.wit b/files/ipsec.conf.wit index f4229a8..0c2be5d 100644 --- a/files/ipsec.conf.wit +++ b/files/ipsec.conf.wit @@ -10,13 +10,12 @@ config setup # auto=add conn %default - mobike=no keyingtries=%forever dpdtimeout=10 dpddelay=3 dpdaction=restart type=transport - #keyexchange=ikev1 + keyexchange=ikev1 ike=aes256-sha512-modp4096,aes128-sha1-modp2048! esp=aes256-sha512-modp4096,aes128-sha1-modp2048! leftcert=FQHOSTNAME.crt