algo/roles/vpn/templates/client_ipsec.conf.j2
2016-11-27 01:37:17 +03:00

25 lines
710 B
Django/Jinja

conn ikev2-{{ IP_subject_alt_name }}
{% for key, value in ipsec_config.iteritems() %}
{{ key }}={{ value }}
{% endfor %}
{% if Win10_Enabled is defined and Win10_Enabled == "Y" %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256,aes256-sha2_256-prfsha256-modp2048!
esp=aes128gcm16-sha2_256-ecp256,aes256-sha1-modp1024!
{% else %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256
esp=aes128gcm16-sha2_256-ecp256
{% endif %}
right={{ IP_subject_alt_name }}
rightid={{ IP_subject_alt_name }}
rightsubnet=0.0.0.0/0
rightauth=pubkey
leftsourceip=%config
leftauth=pubkey
leftcert={{ IP_subject_alt_name }}_{{ item }}.crt
leftfirewall=yes
left=%defaultroute
auto=add