enabled firewall support

2006-09-18 07:41:54 +00:00
parent f9aa9e2977
commit 957115957a
36 changed files with 94 additions and 32 deletions
@@ -17,6 +17,7 @@ conn net-net
 	leftsubnet=10.1.0.0/16
 	leftcert=moonCert.pem
 	[email protected]
+	leftfirewall=yes
 	right=PH_IP_SUN
 	rightsubnet=10.2.0.0/16
 	[email protected]
@@ -9,14 +9,15 @@ conn %default
 	keylife=20m
 	rekeymargin=3m
        keyingtries=1
+	keyexchange=ikev2

 conn net-net 
 	left=PH_IP_SUN
 	leftcert=sunCert.pem
 	[email protected]
 	leftsubnet=10.2.0.0/16
+	leftfirewall=yes
 	right=PH_IP_MOON
 	[email protected]
 	rightsubnet=10.1.0.0/16
-	keyexchange=ikev2
 	auto=add