denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updated man page: proposals using PFS

Browse Source
This commit is contained in:
Martin Willi
2007-04-19 14:22:53 +00:00
parent 622f50801c
commit b7ade11b16
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/starter/ipsec.conf.5
+5 -2
View File
@@ -678,13 +678,16 @@ Relevant only locally, other end need not agree on it.
.B ike .B ike
IKE/ISAKMP SA encryption/authentication algorithm to be used, e.g. IKE/ISAKMP SA encryption/authentication algorithm to be used, e.g.
.B aes128-sha1-modp2048 .B aes128-sha1-modp2048
(encryption-integrity-dhgroup). (encryption-integrity-dhgroup). In IKEv2, multiple algorithms and proposals
may be included, such as
.B aes128-aes256-sha1-modp1536-modp2048,3des-sha1-md5-modp1024.
.TP .TP
.B esp .B esp
ESP encryption/authentication algorithm to be used ESP encryption/authentication algorithm to be used
for the connection, e.g. for the connection, e.g.
.B 3des-md5 .B 3des-md5
(encryption-integrity). (encryption-integrity-[dh-group]). If dh-group is specified, CHILD_SA setup
and rekeying include a separate diffe hellman exchange (IKEv2 only).
.TP .TP
.B ah .B ah
AH authentication algorithm to be used AH authentication algorithm to be used