minor adjustments to swanctl config template after making all these upgrades to ipsec.conf. ipsec.conf is still the one active, swanctl not cut over yet
This commit is contained in:
parent
d1e2f90bd6
commit
bfbd9068e4
|
@ -1,6 +1,5 @@
|
|||
connections {
|
||||
loopback4 {
|
||||
version = 1
|
||||
local_addrs = LOOPBACKv4
|
||||
remote_addrs = %any4
|
||||
proposals = aes256-sha512-modp4096
|
||||
|
@ -17,7 +16,7 @@ connections {
|
|||
|
||||
children {
|
||||
loopback4 {
|
||||
interface = lo,feth+
|
||||
interface = lo
|
||||
remote_ts = IPSEC_IPV4_SUBNETS
|
||||
local_ts = LOOPBACKv4
|
||||
mode = transport
|
||||
|
@ -28,7 +27,6 @@ connections {
|
|||
}
|
||||
|
||||
loopback6 {
|
||||
version = 1
|
||||
local_addrs = LOOPBACKv6
|
||||
remote_addrs = %any6
|
||||
proposals = aes256-sha512-modp4096
|
||||
|
@ -45,7 +43,7 @@ connections {
|
|||
|
||||
children {
|
||||
loopback6 {
|
||||
interface = lo,feth+
|
||||
interface = lo
|
||||
remote_ts = IPSEC_IPV6_SUBNETS
|
||||
local_ts = LOOPBACKv6
|
||||
mode = transport
|
||||
|
|
Loading…
Reference in New Issue