for now keeping the ikev1, the upgrade to v2 needs to be planned

2018-10-31 23:15:54 +01:00 · 2018-10-31 23:15:54 +01:00 · 03a8db740f
parent d3161082de
commit 03a8db740f
1 changed files with 1 additions and 2 deletions
--- a/files/ipsec.conf.wit
+++ b/files/ipsec.conf.wit
@ -10,13 +10,12 @@ config setup
 #    auto=add

 conn %default
-    mobike=no
    keyingtries=%forever
    dpdtimeout=10
    dpddelay=3
    dpdaction=restart
    type=transport
-    #keyexchange=ikev1
+    keyexchange=ikev1
    ike=aes256-sha512-modp4096,aes128-sha1-modp2048!
    esp=aes256-sha512-modp4096,aes128-sha1-modp2048!
    leftcert=FQHOSTNAME.crt