mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2025-03-13 16:26:06 +03:00
Code Issues Projects Releases Wiki Activity

Update IKEv2 docs

Browse Source 
- Enable MOBIKE option for Libreswan 3.23 and newer
- Add AES-GCM cipher for improved performance
This commit is contained in:
hwdsl2 2018-10-25 01:04:16 -05:00
parent 69d1bfe06f
commit f05bf90dbc
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
docs/ikev2-howto-zh.md
View File

@ -57,7 +57,7 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
rekey=no
fragmentation=yes
ike=3des-sha1,3des-sha2,aes-sha1,aes-sha1;modp1024,aes-sha2,aes-sha2;modp1024
phase2alg=3des-sha1,3des-sha2,aes-sha1,aes-sha2
phase2alg=3des-sha1,3des-sha2,aes-sha1,aes-sha2,aes_gcm-null
EOF
```
@ -73,6 +73,7 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
$ cat >> /etc/ipsec.conf <<EOF
modecfgdns="8.8.8.8, 8.8.4.4"
encapsulation=yes
mobike=yes
EOF
```

3
docs/ikev2-howto.md
View File

@ -57,7 +57,7 @@ Before continuing, make sure you have successfully <a href="https://github.com/h
rekey=no
fragmentation=yes
ike=3des-sha1,3des-sha2,aes-sha1,aes-sha1;modp1024,aes-sha2,aes-sha2;modp1024
phase2alg=3des-sha1,3des-sha2,aes-sha1,aes-sha2
phase2alg=3des-sha1,3des-sha2,aes-sha1,aes-sha2,aes_gcm-null
EOF
```
@ -73,6 +73,7 @@ Before continuing, make sure you have successfully <a href="https://github.com/h
$ cat >> /etc/ipsec.conf <<EOF
modecfgdns="8.8.8.8, 8.8.4.4"
encapsulation=yes
mobike=yes
EOF
```