diff options
| author | Martin Willi <martin@strongswan.org> | 2007-04-19 14:22:53 +0000 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2007-04-19 14:22:53 +0000 |
| commit | b7ade11b16487a4d20065d7c68483ff3d54c6c2f (patch) | |
| tree | cd146b130e075908524d9918c0975bace3b9878d /src | |
| parent | 622f50801c6e4369bbe72fc5712cebca1702dc2f (diff) | |
| download | strongswan-b7ade11b16487a4d20065d7c68483ff3d54c6c2f.tar.bz2 strongswan-b7ade11b16487a4d20065d7c68483ff3d54c6c2f.tar.xz | |
updated man page: proposals using PFS
Diffstat (limited to 'src')
| -rw-r--r-- | src/starter/ipsec.conf.5 | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/starter/ipsec.conf.5 b/src/starter/ipsec.conf.5 index 3e59190e3..f0363803b 100644 --- a/src/starter/ipsec.conf.5 +++ b/src/starter/ipsec.conf.5 @@ -678,13 +678,16 @@ Relevant only locally, other end need not agree on it. .B ike IKE/ISAKMP SA encryption/authentication algorithm to be used, e.g. .B aes128-sha1-modp2048 -(encryption-integrity-dhgroup). +(encryption-integrity-dhgroup). In IKEv2, multiple algorithms and proposals +may be included, such as +.B aes128-aes256-sha1-modp1536-modp2048,3des-sha1-md5-modp1024. .TP .B esp ESP encryption/authentication algorithm to be used for the connection, e.g. .B 3des-md5 -(encryption-integrity). +(encryption-integrity-[dh-group]). If dh-group is specified, CHILD_SA setup +and rekeying include a separate diffe hellman exchange (IKEv2 only). .TP .B ah AH authentication algorithm to be used |