vici: Make IKEv2 the default IKE version

We don't want to accept IKEv1 clients anymore by default, so we also
warn them about it in the log.
This commit is contained in:
Tobias Brunner committed 2026-07-31 16:07:52 +02:00
1 parent e0fd0f51ea
commit bf438cb182
4 files changed
+16 -6

No files matched your search

@@ -13,12 +13,13 @@ connections {
}
children {
net {
local_ts = 10.1.0.0/16
local_ts = 10.1.0.0/16
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128-sha256-ecp256
}
}
version = 0
mobike = no
fragmentation = yes
proposals = aes128-sha256-ecp256
@@ -1,7 +1,7 @@
connections {
rw {
local_addrs = fec0::1
local_addrs = fec0::1
local {
auth = pubkey
@@ -13,12 +13,13 @@ connections {
}
children {
net {
local_ts = fec1::/16
local_ts = fec1::/16
updown = /usr/local/libexec/ipsec/_updown iptables
esp_proposals = aes128-sha256-ecp256
}
}
version = 0
mobike = no
fragmentation = yes
proposals = aes128-sha256-ecp256