security-policies: Add new "performance" policy

[network.git] / config / vpn / security-policies / performance

diff --git a/config/vpn/security-policies/performance b/config/vpn/security-policies/performance
new file mode 100644 (file)
index 0000000..a40b454
--- /dev/null
+++ b/config/vpn/security-policies/performance
@@ -0,0 +1,7 @@
+CIPHER="AES128-GCM128 AES128-CBC"
+COMPRESSION="off"
+GROUP_TYPE="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
+INTEGRITY="SHA256"
+KEY_EXCHANGE="ikev2"
+LIFETIME="28800"
+PFS="on"