summaryrefslogtreecommitdiff
path: root/sbin
diff options
context:
space:
mode:
authorNiklas Hallqvist <niklas@cvs.openbsd.org>1999-02-26 03:45:31 +0000
committerNiklas Hallqvist <niklas@cvs.openbsd.org>1999-02-26 03:45:31 +0000
commitaa3c17bf30e37ea882296a197ff030c9d8d8173e (patch)
tree7c335806c2cd8b2d24b824ab430904f0acfa46e4 /sbin
parent22780a0644c1709cb2bb55832af1449d92856bdc (diff)
Merge from the Ericsson repository
| revision 1.26 | date: 1999/02/24 15:48:51; author: niklas; state: Exp; lines: +2 -1 | Show a commented out Listen-on line | ---------------------------- | revision 1.25 | date: 1999/01/31 01:52:19; author: niklas; state: Exp; lines: +7 -1 | on-demand keying | ----------------------------
Diffstat (limited to 'sbin')
-rw-r--r--sbin/isakmpd/isakmpd.conf.sample11
1 files changed, 9 insertions, 2 deletions
diff --git a/sbin/isakmpd/isakmpd.conf.sample b/sbin/isakmpd/isakmpd.conf.sample
index 2ed6ccd7352..0da2cc94c33 100644
--- a/sbin/isakmpd/isakmpd.conf.sample
+++ b/sbin/isakmpd/isakmpd.conf.sample
@@ -1,11 +1,12 @@
-# $OpenBSD: isakmpd.conf.sample,v 1.6 1998/12/21 01:02:25 niklas Exp $
-# $EOM: isakmpd.conf.sample,v 1.24 1998/12/21 00:48:06 niklas Exp $
+# $OpenBSD: isakmpd.conf.sample,v 1.7 1999/02/26 03:45:30 niklas Exp $
+# $EOM: isakmpd.conf.sample,v 1.26 1999/02/24 15:48:51 niklas Exp $
# A configuration sample for the isakmpd ISAKMP/Oakley (aka IKE) daemon.
[General]
Retransmits= 3
Exchange-max-time= 120
+#Listen-on= 10.1.0.2
# Incoming phase 1 negotiations are multiplexed on the source IP address
[Phase 1]
@@ -13,6 +14,12 @@ Exchange-max-time= 120
10.1.0.2= ISAKMP-peer-2
Default= Default-ISAKMP-peer
+# These connections are walked over after config file parsing and told
+# to the application layer so that it will inform us when traffic wants to
+# pass over them. This means we can do on-demand keying.
+[Phase 2]
+Connections= IPsec-1-2
+
[ISAKMP-peer-1]
Phase= 1
Transport= udp