47 lines
840 B
Django/Jinja
47 lines
840 B
Django/Jinja
connections {
|
|
remote-site {
|
|
version = 2
|
|
proposals = aes256-sha256-modp2048,aes256-sha1-modp1024
|
|
reauth_time = 28800
|
|
unique = replace
|
|
|
|
local_addrs = {{ local_addrs }}
|
|
remote_addrs = {{ remote_addrs }}
|
|
|
|
local {
|
|
id = {{ local_id }}
|
|
auth = psk
|
|
}
|
|
|
|
remote {
|
|
id = @{{ remote_id }}
|
|
auth = psk
|
|
}
|
|
|
|
children {
|
|
site2site {
|
|
mode = tunnel
|
|
local_ts = {{ local_cidrs }}
|
|
remote_ts = {{ remote_cidrs }}
|
|
esp_proposals = aes256-sha256,aes256-sha1
|
|
life_time = 3600
|
|
dpd_action = restart
|
|
start_action = start
|
|
close_action = none
|
|
}
|
|
}
|
|
|
|
rekey_time = 10800
|
|
dpd_delay = 10
|
|
dpd_timeout = 120
|
|
}
|
|
}
|
|
|
|
secrets {
|
|
ike-psk {
|
|
id-1 = {{ local_id }}
|
|
id-2 = @{{ remote_id }}
|
|
secret = "{{ psk }}"
|
|
}
|
|
}
|