Minor improvement to IPsec config
This commit is contained in:
parent
96d6f4b3e3
commit
9ce1769208
@ -197,6 +197,8 @@ conn shared
|
|||||||
dpddelay=30
|
dpddelay=30
|
||||||
dpdtimeout=120
|
dpdtimeout=120
|
||||||
dpdaction=clear
|
dpdaction=clear
|
||||||
|
ike=3des-sha1,aes-sha1
|
||||||
|
phase2alg=3des-sha1,aes-sha1
|
||||||
|
|
||||||
conn l2tp-psk
|
conn l2tp-psk
|
||||||
auto=add
|
auto=add
|
||||||
@ -204,11 +206,8 @@ conn l2tp-psk
|
|||||||
leftnexthop=%defaultroute
|
leftnexthop=%defaultroute
|
||||||
leftprotoport=17/1701
|
leftprotoport=17/1701
|
||||||
rightprotoport=17/%any
|
rightprotoport=17/%any
|
||||||
rightsubnetwithin=0.0.0.0/0
|
|
||||||
type=transport
|
type=transport
|
||||||
auth=esp
|
auth=esp
|
||||||
ike=3des-sha1,aes-sha1
|
|
||||||
phase2alg=3des-sha1,aes-sha1
|
|
||||||
also=shared
|
also=shared
|
||||||
|
|
||||||
conn xauth-psk
|
conn xauth-psk
|
||||||
|
@ -207,6 +207,8 @@ conn shared
|
|||||||
dpddelay=30
|
dpddelay=30
|
||||||
dpdtimeout=120
|
dpdtimeout=120
|
||||||
dpdaction=clear
|
dpdaction=clear
|
||||||
|
ike=3des-sha1,aes-sha1
|
||||||
|
phase2alg=3des-sha1,aes-sha1
|
||||||
|
|
||||||
conn l2tp-psk
|
conn l2tp-psk
|
||||||
auto=add
|
auto=add
|
||||||
@ -214,11 +216,8 @@ conn l2tp-psk
|
|||||||
leftnexthop=%defaultroute
|
leftnexthop=%defaultroute
|
||||||
leftprotoport=17/1701
|
leftprotoport=17/1701
|
||||||
rightprotoport=17/%any
|
rightprotoport=17/%any
|
||||||
rightsubnetwithin=0.0.0.0/0
|
|
||||||
type=transport
|
type=transport
|
||||||
auth=esp
|
auth=esp
|
||||||
ike=3des-sha1,aes-sha1
|
|
||||||
phase2alg=3des-sha1,aes-sha1
|
|
||||||
also=shared
|
also=shared
|
||||||
|
|
||||||
conn xauth-psk
|
conn xauth-psk
|
||||||
|
Loading…
x
Reference in New Issue
Block a user