Sprinkle a bit of magic   powder around.

This commit is contained in:
Giorgos Keramidas 2003-01-22 17:34:33 +00:00
parent 0a3eed39d8
commit ad1327323d
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=15765

View file

@ -107,8 +107,8 @@ options IPSEC_DEBUG</programlisting>
<para>For instructions on building a custom kernel, refer to the
<ulink url="http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html">
FreeBSD handbook</ulink>. Please note that <acronym>IP</acronym>
protocol 50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
port <literal>500</literal> must be open between the Firewall-1
protocol&nbsp;50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
port&nbsp;<literal>500</literal> must be open between the Firewall-1
host and the FreeBSD <acronym>GW</acronym>.</para>
<para>Also, <application>racoon</application> must be installed to
@ -191,7 +191,7 @@ Use Perfect Forward Secrecy: Checked</programlisting>
optional. Enabling <acronym>PFS</acronym> will add another layer of
encryption security, but does come at the cost of increased
<acronym>CPU</acronym> overhead. If <acronym>PFS</acronym> is not
used, uncheck the box above and comment out the <literal>pfs_group 1</literal>
used, uncheck the box above and comment out the <literal>pfs_group&nbsp;1</literal>
line from <filename>racoon.conf</filename> on FreeBSD
<acronym>GW</acronym>. An example <filename>racoon.conf</filename>
is provided later in this document.</para>