tohe
/
7u83-ipsec
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

lifetime settings enabled

This commit is contained in:
7u83 2018-03-13 18:20:40 +01:00
parent 95c339c546
commit bb4d2d81b4
2 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
templates/racoon/racoon.conf.erb
View File

@ -8,14 +8,14 @@ remote <%= @remote_ip %> {
encryption_algorithm <%= @encryption %>; encryption_algorithm <%= @encryption %>;
hash_algorithm <%= @hash %>; hash_algorithm <%= @hash %>;
dh_group <%= @dh_group %>; dh_group <%= @dh_group %>;
lifetime time <%= @lifetime %>; lifetime time <%= @lifetime %> sec;
authentication_method pre_shared_key; authentication_method pre_shared_key;
} }
# generate_policy on; # generate_policy on;
} }
<% @nets.each do |net| -%> <% @nets.each do |net| -%>
<%- @salifetime = net['lifetime'] ? net['lifetime'] : "3600 sec" %> <%- @salifetime = net['lifetime'] ? net['lifetime'] : "3600 " %>
<%- @saencryption = net['encryption'] ? net['encryption'] : @encryption %> <%- @saencryption = net['encryption'] ? net['encryption'] : @encryption %>
<%- @pfs_group = net['pfs_group'] ? net['pfs_group'] : @dh_group %> <%- @pfs_group = net['pfs_group'] ? net['pfs_group'] : @dh_group %>
<%- @p2hash = net['hash'] ? net['hash'] : @hash %> <%- @p2hash = net['hash'] ? net['hash'] : @hash %>
@ -29,7 +29,7 @@ sainfo address <%= net['local'] %> <%= @netproto %> address <%= net['remote'] %>
<%- @komma="" -%> <%- @komma="" -%>
authentication_algorithm <%- @p2hash.each do |hmalgo| -%><%=@komma -%>hmac_<%= hmalgo -%> <%- @komma=',' -%> <%- end -%>; authentication_algorithm <%- @p2hash.each do |hmalgo| -%><%=@komma -%>hmac_<%= hmalgo -%> <%- @komma=',' -%> <%- end -%>;
compression_algorithm deflate; compression_algorithm deflate;
lifetime time <%= @salifetime %>; lifetime time <%= @salifetime %> sec;
} }
<% end -%> <% end -%>

5
templates/strongswan/ipsec.conf.tunnel.erb
View File

@ -5,6 +5,9 @@
<%- @p2hash = net['hash'] ? net['hash'] : @hash -%> <%- @p2hash = net['hash'] ? net['hash'] : @hash -%>
conn "<%= @title %> <%= net['local'] %> <%= net['remote']%>" conn "<%= @title %> <%= net['local'] %> <%= net['remote']%>"
ikelifetime=<%= @lifetime %>s
lifetime=<%= @salifetime %>s
left=<%= @local_ip %> left=<%= @local_ip %>
leftsubnet=<%= net['local'] %> leftsubnet=<%= net['local'] %>
right=<%= @remote_ip %> right=<%= @remote_ip %>
@ -14,7 +17,7 @@ conn "<%= @title %> <%= net['local'] %> <%= net['remote']%>"
esp= <%- @saencryption.each do |saenc| -%> <%- @p2hash.each do |p2h| -%><%= @komma -%><%= saenc %>-<%= p2h %>-<%= @pfs_group -%> <%- @komma=',' %><%- end -%> <%- end -%> esp= <%- @saencryption.each do |saenc| -%> <%- @p2hash.each do |p2h| -%><%= @komma -%><%= saenc %>-<%= p2h %>-<%= @pfs_group -%> <%- @komma=',' %><%- end -%> <%- end -%>
auto=start auto=route
authby=secret authby=secret
keyexchange=ikev1 keyexchange=ikev1
<% end -%> <% end -%>