ajout srcid et dstid + rendre plus lisible config
This commit is contained in:
parent
0cfd514238
commit
90cc55a5a9
|
@ -64,9 +64,10 @@ remote_network="203.0.113.128/25"
|
||||||
ikev2 active esp \
|
ikev2 active esp \
|
||||||
from $local_network to $remote_network \
|
from $local_network to $remote_network \
|
||||||
local $local_ip peer $remote_ip \
|
local $local_ip peer $remote_ip \
|
||||||
ikesa auth hmac-sha2-256 enc aes-256 prf hmac-sha2-256 group modp4096 \
|
ikesa auth hmac-sha2-256 enc aes-256 group modp4096 prf hmac-sha2-256 \
|
||||||
childsa auth hmac-sha1 enc aes-256 group modp4096 \
|
childsa auth hmac-sha1 enc aes-256 group modp4096 \
|
||||||
ikelifetime 86400 lifetime 3600 \
|
ikelifetime 86400 lifetime 3600 \
|
||||||
|
srcid $local_ip dstid $remote_ip \
|
||||||
psk "PSK-TO-CONFIGURE"
|
psk "PSK-TO-CONFIGURE"
|
||||||
~~~
|
~~~
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue