From: Michael Tremer <michael.tremer@ipfire.org>
Date: Fri, 21 Jul 2017 20:43:39 +0000 (+0200)
Subject: security-policies: Add new "performance" policy
X-Git-Tag: 009~121
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=56d5efa7c528809be333ffab7ea8a39383ac4425;p=network.git

security-policies: Add new "performance" policy

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/Makefile.am b/Makefile.am
index 560b65c9..761e849e 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -277,6 +277,7 @@ EXTRA_DIST += \
 systemconfig_vpndir = $(systemconfigdir)/vpn
 
 dist_systemconfig_vpn_security_policies_DATA = \
+	config/vpn/security-policies/performance \
 	config/vpn/security-policies/system
 
 systemconfig_vpn_security_policiesdir = $(systemconfig_vpndir)/security-policies
diff --git a/config/vpn/security-policies/performance b/config/vpn/security-policies/performance
new file mode 100644
index 00000000..a40b454c
--- /dev/null
+++ b/config/vpn/security-policies/performance
@@ -0,0 +1,7 @@
+CIPHER="AES128-GCM128 AES128-CBC"
+COMPRESSION="off"
+GROUP_TYPE="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
+INTEGRITY="SHA256"
+KEY_EXCHANGE="ikev2"
+LIFETIME="28800"
+PFS="on"