ipsec-on-freebsd.md
... ...
@@ -62,4 +62,11 @@ remote b.c.d.e [500] {
62 62
}
63 63
}
64 64
65
+sainfo (address a.b.c.d gre address b.c.d.e gre) {
66
+ pfs_group modp4096;
67
+ lifetime time 1 hour;
68
+ encryption_algorithm aes 256;
69
+ authentication_algorithm hmac_sha1;
70
+}
71
+
65 72
```
... ...
\ No newline at end of file