wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-06-07 07:33:52 +02:00
Code Issues Projects Releases Wiki Activity

disable dpdtimeout #90

Browse source
This commit is contained in:
Jack Ivanov 2016-09-26 22:07:34 +03:00
parent 8e0cca6b66
commit ad9d7d6ddb
1 changed files with 4 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
roles/vpn/templates/ipsec.conf.j2
View file

@ -5,14 +5,13 @@ config setup
conn %default conn %default
dpdaction=clear dpdaction=clear
dpddelay=35s dpddelay=35s
dpdtimeout=300s
rekey=no rekey=no
keyexchange=ikev2 keyexchange=ikev2
ike=aes128gcm16-sha2_256-prfsha256-ecp256! ike=aes128gcm16-sha2_256-prfsha256-ecp256!
esp=aes128gcm16-sha2_256-ecp256! esp=aes128gcm16-sha2_256-ecp256!
compress=yes compress=yes
fragmentation=yes fragmentation=yes
left=%any left=%any
leftauth=pubkey leftauth=pubkey
leftid={{ IP_subject_alt_name }} leftid={{ IP_subject_alt_name }}
@ -26,9 +25,8 @@ conn %default
{% if service_dns is defined and service_dns == "Y" %} {% if service_dns is defined and service_dns == "Y" %}
rightdns={{ local_service_ip }} rightdns={{ local_service_ip }}
{% else %} {% else %}
rightdns={% for host in dns_servers %}{{ host }}{% if not loop.last %},{% endif %}{% endfor %} rightdns={% for host in dns_servers %}{{ host }}{% if not loop.last %},{% endif %}{% endfor %}
{% endif %} {% endif %}
conn ikev2-pubkey conn ikev2-pubkey
auto=add auto=add