Sprinkle a bit of magic powder around.
This commit is contained in:
parent
0a3eed39d8
commit
ad1327323d
Notes:
svn2git
2020-12-08 03:00:23 +00:00
svn path=/head/; revision=15765
1 changed files with 3 additions and 3 deletions
|
|
@ -107,8 +107,8 @@ options IPSEC_DEBUG</programlisting>
|
|||
<para>For instructions on building a custom kernel, refer to the
|
||||
<ulink url="http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html">
|
||||
FreeBSD handbook</ulink>. Please note that <acronym>IP</acronym>
|
||||
protocol 50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
|
||||
port <literal>500</literal> must be open between the Firewall-1
|
||||
protocol 50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
|
||||
port <literal>500</literal> must be open between the Firewall-1
|
||||
host and the FreeBSD <acronym>GW</acronym>.</para>
|
||||
|
||||
<para>Also, <application>racoon</application> must be installed to
|
||||
|
|
@ -191,7 +191,7 @@ Use Perfect Forward Secrecy: Checked</programlisting>
|
|||
optional. Enabling <acronym>PFS</acronym> will add another layer of
|
||||
encryption security, but does come at the cost of increased
|
||||
<acronym>CPU</acronym> overhead. If <acronym>PFS</acronym> is not
|
||||
used, uncheck the box above and comment out the <literal>pfs_group 1</literal>
|
||||
used, uncheck the box above and comment out the <literal>pfs_group 1</literal>
|
||||
line from <filename>racoon.conf</filename> on FreeBSD
|
||||
<acronym>GW</acronym>. An example <filename>racoon.conf</filename>
|
||||
is provided later in this document.</para>
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue