mirror of
https://github.com/trailofbits/algo
synced 2024-11-20 03:25:36 +00:00
29 lines
658 B
Django/Jinja
29 lines
658 B
Django/Jinja
config setup
|
|
uniqueids = never # allow multiple connections per user
|
|
charondebug="ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2, mgr 2"
|
|
|
|
conn %default
|
|
dpdaction=clear
|
|
dpddelay=35s
|
|
dpdtimeout=300s
|
|
rekey=no
|
|
keyexchange=ikev2
|
|
ike=aes128gcm16-sha2_256-prfsha256-ecp256!
|
|
esp=aes128gcm16-sha2_256-ecp256!
|
|
compress=yes
|
|
fragmentation=yes
|
|
|
|
left=%any
|
|
leftauth=pubkey
|
|
leftid={{ server_name }}
|
|
leftcert={{ server_name }}.crt
|
|
leftsendcert=always
|
|
leftsubnet=0.0.0.0/0,::/0
|
|
|
|
right=%any
|
|
rightauth=pubkey
|
|
rightsourceip=10.0.0.0/24
|
|
rightdns=8.8.8.8,8.8.4.4
|
|
|
|
conn ikev2-pubkey
|
|
auto=add |