mirror of
https://github.com/novatiq/packages.git
synced 2026-04-30 15:38:40 +01:00
net/ipsec-tools: Install our own racoon.conf rather than using the one provided upstream.
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
This commit is contained in:
@@ -0,0 +1,36 @@
|
||||
# Simple racoon.conf
|
||||
#
|
||||
# Refer to http://wiki.openwrt.org/doc/howto/vpn.ipsec.basics.racoon for
|
||||
# details about configuring racoon in OpenWRT.
|
||||
#
|
||||
# Also read the Linux IPSEC Howto up at
|
||||
# http://www.ipsec-howto.org/t1.html
|
||||
#
|
||||
# Manual pages for ipsec-tools are not included with OpenWRT. Refer to
|
||||
# the following locations to view them online:
|
||||
# http://linux.die.net/man/8/racoon
|
||||
# http://linux.die.net/man/5/racoon.conf
|
||||
# http://linux.die.net/man/8/setkey
|
||||
#
|
||||
|
||||
log notify;
|
||||
path pre_shared_key "/etc/racoon/psk.txt";
|
||||
path certificate "/etc/racoon/certs";
|
||||
|
||||
#remote 172.31.1.1 {
|
||||
# exchange_mode main,aggressive;
|
||||
# proposal {
|
||||
# encryption_algorithm 3des;
|
||||
# hash_algorithm sha1;
|
||||
# authentication_method pre_shared_key;
|
||||
# dh_group modp1024;
|
||||
# }
|
||||
# generate_policy off;
|
||||
#}
|
||||
#
|
||||
#sainfo address 192.168.203.10[any] any address 192.168.22.0/24[any] any {
|
||||
# pfs_group modp768;
|
||||
# encryption_algorithm 3des;
|
||||
# authentication_algorithm hmac_md5;
|
||||
# compression_algorithm deflate;
|
||||
#}
|
||||
Reference in New Issue
Block a user