Expand all TABS to spaces in a <programlisting> to avoid indentation
weirdness in rendered output.
This commit is contained in:
parent
69858981e9
commit
7f7ed5dd8a
Notes:
svn2git
2020-12-08 03:00:23 +00:00
svn path=/head/; revision=21558
1 changed files with 43 additions and 43 deletions
|
@ -279,77 +279,77 @@ END
|
||||||
#
|
#
|
||||||
# search this file for pre_shared_key with various ID key.
|
# search this file for pre_shared_key with various ID key.
|
||||||
#
|
#
|
||||||
path pre_shared_key "/usr/local/etc/racoon/psk.txt" ;
|
path pre_shared_key "/usr/local/etc/racoon/psk.txt" ;
|
||||||
log debug;
|
log debug;
|
||||||
#
|
#
|
||||||
# "padding" defines some parameter of padding. You should not touch these.
|
# "padding" defines some parameter of padding. You should not touch these.
|
||||||
#
|
#
|
||||||
padding
|
padding
|
||||||
{
|
{
|
||||||
maximum_length 20; # maximum padding length.
|
maximum_length 20; # maximum padding length.
|
||||||
randomize off; # enable randomize length.
|
randomize off; # enable randomize length.
|
||||||
strict_check off; # enable strict check.
|
strict_check off; # enable strict check.
|
||||||
exclusive_tail off; # extract last one octet.
|
exclusive_tail off; # extract last one octet.
|
||||||
}
|
}
|
||||||
|
|
||||||
listen
|
listen
|
||||||
{
|
{
|
||||||
#isakmp ::1 [7000];
|
#isakmp ::1 [7000];
|
||||||
#isakmp 0.0.0.0 [500];
|
#isakmp 0.0.0.0 [500];
|
||||||
#admin [7002]; # administrative port by kmpstat.
|
#admin [7002]; # administrative port by kmpstat.
|
||||||
#strict_address; # required all addresses must be bound.
|
#strict_address; # required all addresses must be bound.
|
||||||
}
|
}
|
||||||
#
|
#
|
||||||
# Specification of default various timers.
|
# Specification of default various timers.
|
||||||
#
|
#
|
||||||
timer
|
timer
|
||||||
{
|
{
|
||||||
#
|
#
|
||||||
# These values can be changed per remote node.
|
# These values can be changed per remote node.
|
||||||
#
|
#
|
||||||
counter 5; # maximum trying count to send.
|
counter 5; # maximum trying count to send.
|
||||||
interval 20 sec; # maximum interval to resend.
|
interval 20 sec; # maximum interval to resend.
|
||||||
persend 1; # the number of packets per a send.
|
persend 1; # the number of packets per a send.
|
||||||
#
|
#
|
||||||
# timer for waiting to complete each phase.
|
# timer for waiting to complete each phase.
|
||||||
#
|
#
|
||||||
phase1 30 sec;
|
phase1 30 sec;
|
||||||
phase2 15 sec;
|
phase2 15 sec;
|
||||||
}
|
}
|
||||||
|
|
||||||
remote anonymous
|
remote anonymous
|
||||||
{
|
{
|
||||||
exchange_mode aggressive,main; # For Firewall-1 Aggressive mode
|
exchange_mode aggressive,main; # For Firewall-1 Aggressive mode
|
||||||
|
|
||||||
#my_identifier address;
|
#my_identifier address;
|
||||||
#my_identifier user_fqdn "";
|
#my_identifier user_fqdn "";
|
||||||
#my_identifier address "";
|
#my_identifier address "";
|
||||||
#peers_identifier address "";
|
#peers_identifier address "";
|
||||||
#certificate_type x509 "" "";
|
#certificate_type x509 "" "";
|
||||||
|
|
||||||
nonce_size 16;
|
nonce_size 16;
|
||||||
lifetime time 10 min; # sec,min,hour
|
lifetime time 10 min; # sec,min,hour
|
||||||
lifetime byte 5 MB; # B,KB,GB
|
lifetime byte 5 MB; # B,KB,GB
|
||||||
initial_contact on;
|
initial_contact on;
|
||||||
support_mip6 on;
|
support_mip6 on;
|
||||||
proposal_check obey; # obey, strict or claim
|
proposal_check obey; # obey, strict or claim
|
||||||
|
|
||||||
proposal {
|
proposal {
|
||||||
encryption_algorithm 3des;
|
encryption_algorithm 3des;
|
||||||
hash_algorithm md5;
|
hash_algorithm md5;
|
||||||
authentication_method pre_shared_key;
|
authentication_method pre_shared_key;
|
||||||
dh_group 2 ;
|
dh_group 2 ;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
sainfo anonymous
|
sainfo anonymous
|
||||||
{
|
{
|
||||||
pfs_group 1;
|
pfs_group 1;
|
||||||
lifetime time 10 min;
|
lifetime time 10 min;
|
||||||
lifetime byte 50000 KB;
|
lifetime byte 50000 KB;
|
||||||
encryption_algorithm 3des;
|
encryption_algorithm 3des;
|
||||||
authentication_algorithm hmac_md5;
|
authentication_algorithm hmac_md5;
|
||||||
compression_algorithm deflate ;
|
compression_algorithm deflate ;
|
||||||
}</programlisting>
|
}</programlisting>
|
||||||
|
|
||||||
<para>Ensure that the <filename>/usr/local/etc/racoon/psk.txt</filename>
|
<para>Ensure that the <filename>/usr/local/etc/racoon/psk.txt</filename>
|
||||||
|
|
Loading…
Reference in a new issue