vici: Make IKEv2 the default IKE version
We don't want to accept IKEv1 clients anymore by default, so we also warn them about it in the log.
This commit is contained in:
1 parent
e0fd0f51ea
commit
bf438cb182
4 files changed
+16
-6
No files matched your search
@@ -13,12 +13,13 @@ connections {
|
||||
}
|
||||
children {
|
||||
net {
|
||||
local_ts = 10.1.0.0/16
|
||||
local_ts = 10.1.0.0/16
|
||||
|
||||
updown = /usr/local/libexec/ipsec/_updown iptables
|
||||
esp_proposals = aes128-sha256-ecp256
|
||||
}
|
||||
}
|
||||
version = 0
|
||||
mobike = no
|
||||
fragmentation = yes
|
||||
proposals = aes128-sha256-ecp256
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
connections {
|
||||
|
||||
rw {
|
||||
local_addrs = fec0::1
|
||||
local_addrs = fec0::1
|
||||
|
||||
local {
|
||||
auth = pubkey
|
||||
@@ -13,12 +13,13 @@ connections {
|
||||
}
|
||||
children {
|
||||
net {
|
||||
local_ts = fec1::/16
|
||||
local_ts = fec1::/16
|
||||
|
||||
updown = /usr/local/libexec/ipsec/_updown iptables
|
||||
esp_proposals = aes128-sha256-ecp256
|
||||
}
|
||||
}
|
||||
version = 0
|
||||
mobike = no
|
||||
fragmentation = yes
|
||||
proposals = aes128-sha256-ecp256
|
||||
|
||||
Reference in new issue
Block a user