denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated ipsec.conf.5 with new ESN options

Browse Source
This commit is contained in:
Martin Willi
2011-04-20 12:26:58 +02:00
parent d3d21c29db
commit 378219546c
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/ipsec.conf.5.in
+10 -2
View File
@@ -409,12 +409,20 @@ comma-separated list of ESP encryption/authentication algorithms to be used
for the connection, e.g. for the connection, e.g.
.BR aes128-sha256 . .BR aes128-sha256 .
The notation is The notation is
.BR encryption-integrity-[dh-group] . .BR encryption-integrity[-dhgroup][-esnmodes] .
.br .br
If If
.B dh-group .B dh-group
is specified, CHILD_SA setup and rekeying include a separate diffe hellman is specified, CHILD_SA setup and rekeying include a separate diffe hellman
exchange (IKEv2 only). exchange (IKEv2 only). Valid
.B esnmodes
(IKEv2 only) are
.B esn
and
.B noesn.
Specifying both negotiates Extended Sequence number support with the peer,
the defaut is
.B noesn.
.TP .TP
.BR forceencaps " = yes | " no .BR forceencaps " = yes | " no
force UDP encapsulation for ESP packets even if no NAT situation is detected. force UDP encapsulation for ESP packets even if no NAT situation is detected.