From 188bc5e043d33ccaeab29e0dc0d5ffb85164df6e Mon Sep 17 00:00:00 2001 From: Evgeniy Ivanov Date: Mon, 18 Jul 2016 19:15:34 +0300 Subject: [PATCH] conf fixed --- deploy.yml | 2 +- templates/ipsec.conf.j2 | 25 +++++++++++++++---------- 2 files changed, 16 insertions(+), 11 deletions(-) diff --git a/deploy.yml b/deploy.yml index 988e0da1..f6234d0e 100644 --- a/deploy.yml +++ b/deploy.yml @@ -1,5 +1,5 @@ --- -- include: cloud.yml +#- include: cloud.yml - include: common.yml - include: vpn.yml \ No newline at end of file diff --git a/templates/ipsec.conf.j2 b/templates/ipsec.conf.j2 index a053330a..60202568 100644 --- a/templates/ipsec.conf.j2 +++ b/templates/ipsec.conf.j2 @@ -1,24 +1,29 @@ config setup + uniqueids = never # allow multiple connections per user charondebug="ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2, mgr 2" conn %default + dpdaction=clear + dpddelay=35s + dpdtimeout=300s + rekey=no keyexchange=ikev2 ike=aes128gcm16-sha2_256-prfsha256-ecp256! esp=aes128gcm16-sha2_256-ecp256! - dpdaction=clear - dpddelay=300s - authby=pubkey + compress=yes + fragmentation=yes + left=%any + leftauth=pubkey leftid={{ server_name }} - leftsubnet=0.0.0.0/0 leftcert={{ server_name }}.crt leftsendcert=always + leftsubnet=0.0.0.0/0,::/0 + right=%any + rightauth=pubkey rightsourceip=10.0.0.0/24 - rightdns=8.8.8.8 - rightsendcert=never - -conn IPSec-IKEv2 - keyexchange=ikev2 - auto=add + rightdns=8.8.8.8,8.8.4.4 +conn ikev2-pubkey + auto=add \ No newline at end of file