Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- vpn {
- ipsec {
- allow-access-to-local-interface disable
- auto-firewall-nat-exclude enable
- esp-group FOO0 {
- compression disable
- lifetime 3600
- mode tunnel
- pfs enable
- proposal 1 {
- encryption aes128
- hash sha1
- }
- }
- ike-group FOO0 {
- dead-peer-detection {
- action hold
- interval 30
- timeout 120
- }
- ikev2-reauth no
- key-exchange ikev1
- lifetime 28800
- proposal 1 {
- dh-group 5
- encryption aes128
- hash sha1
- }
- }
- site-to-site {
- peer gbg.mindomän.se {
- authentication {
- mode pre-shared-secret
- pre-shared-secret ****************
- x509 {
- key {
- }
- }
- }
- connection-type initiate
- description garaget-ipsec
- ike-group FOO0
- ikev2-reauth inherit
- local-address any
- tunnel 1 {
- allow-nat-networks disable
- allow-public-networks disable
- esp-group FOO0
- local {
- prefix 192.168.64.0/24
- }
- remote {
- prefix 192.168.16.0/20
- }
- }
- }
- }
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement