for now keeping the ikev1, the upgrade to v2 needs to be planned
This commit is contained in:
parent
d3161082de
commit
03a8db740f
|
@ -10,13 +10,12 @@ config setup
|
||||||
# auto=add
|
# auto=add
|
||||||
|
|
||||||
conn %default
|
conn %default
|
||||||
mobike=no
|
|
||||||
keyingtries=%forever
|
keyingtries=%forever
|
||||||
dpdtimeout=10
|
dpdtimeout=10
|
||||||
dpddelay=3
|
dpddelay=3
|
||||||
dpdaction=restart
|
dpdaction=restart
|
||||||
type=transport
|
type=transport
|
||||||
#keyexchange=ikev1
|
keyexchange=ikev1
|
||||||
ike=aes256-sha512-modp4096,aes128-sha1-modp2048!
|
ike=aes256-sha512-modp4096,aes128-sha1-modp2048!
|
||||||
esp=aes256-sha512-modp4096,aes128-sha1-modp2048!
|
esp=aes256-sha512-modp4096,aes128-sha1-modp2048!
|
||||||
leftcert=FQHOSTNAME.crt
|
leftcert=FQHOSTNAME.crt
|
||||||
|
|
Loading…
Reference in New Issue