Whitespace fix.
This commit is contained in:
parent
a3c5f5587d
commit
1bbc6eafb3
Notes:
svn2git
2020-12-08 03:00:23 +00:00
svn path=/head/; revision=15457
1 changed files with 6 additions and 6 deletions
|
@ -93,7 +93,7 @@
|
||||||
FW-1 Protected Nets Internal Nets
|
FW-1 Protected Nets Internal Nets
|
||||||
199.208.192.0/24 192.168.10.0/24</programlisting>
|
199.208.192.0/24 192.168.10.0/24</programlisting>
|
||||||
|
|
||||||
<para>The FreeBSD gateway (<acronym>GW</acronym> serves as a firewall and
|
<para>The FreeBSD gateway <acronym>GW</acronym> serves as a firewall and
|
||||||
<acronym>NAT</acronym> device for <quote>internal nets.</quote></para>
|
<acronym>NAT</acronym> device for <quote>internal nets.</quote></para>
|
||||||
|
|
||||||
<para>The FreeBSD kernel must be compiled to support IPSec.
|
<para>The FreeBSD kernel must be compiled to support IPSec.
|
||||||
|
@ -104,7 +104,7 @@ options IPSEC_ESP
|
||||||
options IPSEC_DEBUG</programlisting>
|
options IPSEC_DEBUG</programlisting>
|
||||||
|
|
||||||
<para>For instructions on building a custom kernel, refer to the
|
<para>For instructions on building a custom kernel, refer to the
|
||||||
<ulink url="http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/x3663.html">
|
<ulink url="http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html">
|
||||||
FreeBSD handbook</ulink>. Please note that <acronym>IP</acronym>
|
FreeBSD handbook</ulink>. Please note that <acronym>IP</acronym>
|
||||||
protocol 50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
|
protocol 50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
|
||||||
port <literal>500</literal> must be open between the Firewall-1
|
port <literal>500</literal> must be open between the Firewall-1
|
||||||
|
@ -142,7 +142,7 @@ Authentication Method:
|
||||||
(Do not use our example.)</para>
|
(Do not use our example.)</para>
|
||||||
|
|
||||||
<programlisting>Support Aggressive Mode: Checked
|
<programlisting>Support Aggressive Mode: Checked
|
||||||
Supports Subnets: Checked</programlisting>
|
Supports Subnets: Checked</programlisting>
|
||||||
|
|
||||||
<para>After setting the pre-shared secret in the Firewall-1 Network
|
<para>After setting the pre-shared secret in the Firewall-1 Network
|
||||||
Object definition, place this secret in
|
Object definition, place this secret in
|
||||||
|
@ -213,8 +213,8 @@ Use Perfect Forward Secrecy: Checked</programlisting>
|
||||||
# IP addresses
|
# IP addresses
|
||||||
#
|
#
|
||||||
# External Interface External Interface
|
# External Interface External Interface
|
||||||
# 208.229.100.6 216.218.197.2
|
# 208.229.100.6 216.218.197.2
|
||||||
# | |
|
# | |
|
||||||
# +--> Firewall-1 <--> Internet <--> FreeBSD GW <--+
|
# +--> Firewall-1 <--> Internet <--> FreeBSD GW <--+
|
||||||
# | |
|
# | |
|
||||||
# FW-1 Protected Nets Internal Nets
|
# FW-1 Protected Nets Internal Nets
|
||||||
|
@ -304,7 +304,7 @@ END
|
||||||
#certificate_type x509 "" "";
|
#certificate_type x509 "" "";
|
||||||
|
|
||||||
nonce_size 16;
|
nonce_size 16;
|
||||||
lifetime time 10 min; # sec,min,hour
|
lifetime time 10 min; # sec,min,hour
|
||||||
lifetime byte 5 MB; # B,KB,GB
|
lifetime byte 5 MB; # B,KB,GB
|
||||||
initial_contact on;
|
initial_contact on;
|
||||||
support_mip6 on;
|
support_mip6 on;
|
||||||
|
|
Loading…
Reference in a new issue