src/etc/ipsec.conf - diff

Return to ipsec.conf CVS log

Up to [local] / src / etc

version 1.1, 2005/12/24 15:44:12

version 1.2, 2006/03/07 09:08:30

Line 15

# Set up a tunnel using static keying:

# The first rules sets up the flow, second the SA. As default

# The first rule sets up the flow; the second sets up the SA. As default

# transforms ipsecctl(8) will use hmac-sha2-256 for authentication

# transforms, ipsecctl(8) will use hmac-sha2-256 for authentication

# and aesctr for encryption. hmac-sha2-256 uses a 256 bit key, aesctr

# and aesctr for encryption. hmac-sha2-256 uses a 256-bit key; aesctr

# a 160 bit key.

# a 160-bit key.

flow esp from 192.168.7.0/24 to 192.168.8.0/24 peer 192.168.3.2

esp from 192.168.3.1 to 192.168.3.2 spi 0xdeadbeef:0xbeefdead \