/etc/ipsec.conf

## Do not edit, changes will be removed

# See ipsec.conf(5) for syntax and examples.

vpn_ext="redacted"

ike passive esp transport \
        proto udp from { $vpn_ext } to any port 1701 \
        main auth "hmac-sha" enc "aes" group modp1024 \
        quick auth "hmac-sha" enc "aes" \
        psk "redacted"

ike passive esp transport \
        proto udp from { $vpn_ext } to any port 1701 \
        main auth "hmac-sha" enc "3des" group modp1024 \
        quick auth "hmac-sha" enc "3des" \
        psk "redacted"

ike passive esp transport \
        proto udp from { $vpn_ext } to any port 1701 \
        main auth "hmac-sha" enc "3des" group modp1024 \
        quick auth "hmac-sha" enc "aes" \
        psk "redacted"