Update IKEv2 docs
- Add "pfs=no" to fix IKEv2 disconnect issues (at 8 mins) on iOS/macOS - Replace "fragmentation" with "ike-frag" for compatibility - Fixes #474 - Ref: https://github.com/libreswan/libreswan/issues/222 - Ref: http://www.openradar.appspot.com/29821241
This commit is contained in:
parent
f1c8c06af1
commit
23458655ac
@ -55,7 +55,8 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
|
||||
auto=add
|
||||
ikev2=insist
|
||||
rekey=no
|
||||
fragmentation=yes
|
||||
pfs=no
|
||||
ike-frag=yes
|
||||
ike=aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1,aes256-sha2;modp1024,aes128-sha1;modp1024
|
||||
phase2alg=aes_gcm-null,aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1
|
||||
EOF
|
||||
|
@ -55,7 +55,8 @@ Before continuing, make sure you have successfully <a href="https://github.com/h
|
||||
auto=add
|
||||
ikev2=insist
|
||||
rekey=no
|
||||
fragmentation=yes
|
||||
pfs=no
|
||||
ike-frag=yes
|
||||
ike=aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1,aes256-sha2;modp1024,aes128-sha1;modp1024
|
||||
phase2alg=aes_gcm-null,aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1
|
||||
EOF
|
||||
|
Loading…
x
Reference in New Issue
Block a user