security-polices: Create a system policy

[people/ms/network.git] / config / vpn / security-policies / system

diff --git a/config/vpn/security-policies/system b/config/vpn/security-policies/system
new file mode 100644 (file)
index 0000000..accf8a2
--- /dev/null
+++ b/config/vpn/security-policies/system
@@ -0,0 +1,7 @@
+KEY_EXCHANGE="ikev2"
+CIPHER="AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC"
+INTEGRITY="SHA512 SHA384 SHA256"
+GROUP_TYPE="MODP8192 MODP4096 MODP2048"
+LIFETIME="28800"
+PFS="on"
+COMPRESSION="on"