ajout srcid et dstid + rendre plus lisible config
This commit is contained in:
parent
0cfd514238
commit
90cc55a5a9
|
@ -64,9 +64,10 @@ remote_network="203.0.113.128/25"
|
|||
ikev2 active esp \
|
||||
from $local_network to $remote_network \
|
||||
local $local_ip peer $remote_ip \
|
||||
ikesa auth hmac-sha2-256 enc aes-256 prf hmac-sha2-256 group modp4096 \
|
||||
childsa auth hmac-sha1 enc aes-256 group modp4096 \
|
||||
ikesa auth hmac-sha2-256 enc aes-256 group modp4096 prf hmac-sha2-256 \
|
||||
childsa auth hmac-sha1 enc aes-256 group modp4096 \
|
||||
ikelifetime 86400 lifetime 3600 \
|
||||
srcid $local_ip dstid $remote_ip \
|
||||
psk "PSK-TO-CONFIGURE"
|
||||
~~~
|
||||
|
||||
|
|
Loading…
Reference in a new issue