Upgraded IKE and ESP proposals in swanctl scenarios to consistent 128 bit security

2015-12-12 15:54:48 +01:00
parent 02d431022c
commit 4f7f2538c4
46 changed files with 83 additions and 237 deletions
@@ -17,17 +17,12 @@ connections {
         home {
            remote_ts = 10.1.0.0/16 

-            start_action = none
            updown = /usr/local/libexec/ipsec/_updown iptables
-            rekey_time = 10m 
            esp_proposals = aes128-sha256-ecp256
         }
      }
-
      version = 1 
      fragmentation = yes
-      reauth_time = 60m
-      rekey_time =  20m
      proposals = aes128-sha256-ecp256
   }
 }
@@ -17,18 +17,13 @@ connections {
         home {
            remote_ts = 10.1.0.0/16 

-            start_action = none
            updown = /usr/local/libexec/ipsec/_updown iptables
-            rekey_time = 10m
            esp_proposals = aes128-sha256-ecp256
         }
      }
-
      version = 2
      mobike = no 
      fragmentation = yes 
-      reauth_time = 60m
-      rekey_time =  20m
      proposals = aes128-sha256-ecp256
   }
 }
@@ -15,17 +15,12 @@ connections {
         net {
            local_ts  = 10.1.0.0/16 

-            start_action = none
            updown = /usr/local/libexec/ipsec/_updown iptables
-            rekey_time = 10m 
            esp_proposals = aes128-sha256-ecp256
         }
      }
-
      mobike = no
      fragmentation = yes
-      reauth_time = 60m
-      rekey_time =  20m
      proposals = aes128-sha256-ecp256
   }
 }