algo/roles/vpn/templates/client_ipsec.conf.j2
2016-12-14 19:42:39 +03:00

28 lines
733 B
Django/Jinja

conn ikev2-{{ IP_subject_alt_name }}
fragmentation=yes
rekey=no
dpdaction=clear
keyexchange=ikev2
compress=yes
dpddelay=35s
{% if Win10_Enabled is defined and Win10_Enabled == "Y" %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256,aes256-sha2_256-prfsha256-modp2048!
esp=aes128gcm16-sha2_256-ecp256,aes256-sha1-modp1024!
{% else %}
ike=aes128gcm16-sha2_256-prfsha256-ecp256
esp=aes128gcm16-sha2_256-ecp256
{% endif %}
right={{ IP_subject_alt_name }}
rightid={{ IP_subject_alt_name }}
rightsubnet=0.0.0.0/0
rightauth=pubkey
leftsourceip=%config
leftauth=pubkey
leftcert={{ IP_subject_alt_name }}_{{ item }}.crt
leftfirewall=yes
left=%defaultroute
auto=add