ipsec: use aes instead of 3des

This commit is contained in:
Victor LABORIE 2017-06-08 18:01:24 +02:00
parent 079f50dc5a
commit f43f44d362

View file

@ -5,6 +5,6 @@ remote_ip_{{ ipsec_name }}="{{ ipsec_remote_ip }}"
remote_networks_{{ ipsec_name }}="{{ ipsec_remote_network }}"
ike esp from $local_network to $remote_networks_{{ ipsec_name }} peer $remote_ip_{{ ipsec_name }} \
main auth hmac-sha2-512 enc 3des group modp4096 \
quick auth hmac-sha2-512 enc 3des group modp4096 \
main auth hmac-sha2-512 enc aes group modp4096 \
quick auth hmac-sha2-512 enc aes group modp4096 \
psk "{{ ipsec_psk }}"