]> git.ipfire.org Git - people/ms/network.git/blob - config/vpn/security-policies/performance
security-policies: performance: Remove CBC ciphers
[people/ms/network.git] / config / vpn / security-policies / performance
1 CIPHERS="CHACHA20-POLY1305 AES128-GCM128"
2 COMPRESSION="off"
3 GROUP_TYPES="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
4 INTEGRITIES="SHA256"
5 PSEUDO_RANDOM_FUNCTIONS="SHA256"
6 KEY_EXCHANGE="ikev2"
7 LIFETIME="28800"
8 PFS="on"