remove deprecated ipsec options

9 years ago · 11b4d1997f
parent 20db75b316
commit 11b4d1997f
1 changed files with 1 additions and 8 deletions
--- a/ipsec/ipsec.conf.dist
+++ b/ipsec/ipsec.conf.dist
@ -1,21 +1,14 @@
 version 2
-config setup
-    nat_traversal=yes
-    protostack=netkey
-    virtual_private=%v4:!LOCALIPMASK
-    force_keepalive=yes
-    keep_alive=60

 conn L2TP-PSK-NAT
    authby=secret
-    pfs=yes
    auto=add
    keyingtries=3
    rekey=no
    ikelifetime=8h
    keylife=1h
    ike=aes256-sha1,aes128-sha1,3des-sha1
-    phase2alg=aes256-sha1,aes128-sha1,3des-sha1
+    esp=aes256-sha1-modp2048
    keylife=1h
    type=transport
    left=PUBLICIP