jcarr
/
wit-network-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ipsec tweaks for stability ... hopefully....

This commit is contained in:
toby 2018-12-07 18:08:11 +01:00
parent b5710ce2fd
commit d81c621bd0
2 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
files/ipsec.conf.wit
View File

@ -6,10 +6,11 @@ config setup
conn %default conn %default
#keyexchange = ikev2 #keyexchange = ikev2
keyingtries = %forever keyingtries = %forever
mobike = no
dpdtimeout = 10 dpdtimeout = 10
dpddelay = 2 dpddelay = 2
dpdaction = hold dpdaction = hold
#closeaction = none #closeaction = clear
#rekeyfuzz = 100% #rekeyfuzz = 100%
ikelifetime = 4h ikelifetime = 4h
margintime = 12m margintime = 12m

13
files/wit-logging.conf
View File

@ -2,7 +2,20 @@ charon {
install_routes = no install_routes = no
install_virtual_ip = no install_virtual_ip = no
interfaces_use = lo interfaces_use = lo
make_before_break = yes make_before_break = yes
delete_rekeyed = yes
delete_rekeyed_delay = 10
threads = 32
processor {
priority_threads {
critical = 2
high = 4
medium = 4
}
}
syslog { syslog {
auth { auth {
ike_name = yes ike_name = yes