From 54bdc76b3bae95734d73a5ac2f174b32a1b9f2e9 Mon Sep 17 00:00:00 2001 From: srividya0208 Date: Mon, 4 Sep 2023 02:13:54 -0400 Subject: correction of ipsec compression syntax and added a reference for changes done for zone based firewall --- docs/configuration/nat/nat44.rst | 2 -- 1 file changed, 2 deletions(-) (limited to 'docs/configuration/nat') diff --git a/docs/configuration/nat/nat44.rst b/docs/configuration/nat/nat44.rst index 9aeb581e..c660f8f4 100644 --- a/docs/configuration/nat/nat44.rst +++ b/docs/configuration/nat/nat44.rst @@ -740,14 +740,12 @@ external interface in the image above) .. code-block:: none - set vpn ipsec ike-group my-ike ikev2-reauth 'no' set vpn ipsec ike-group my-ike key-exchange 'ikev1' set vpn ipsec ike-group my-ike lifetime '7800' set vpn ipsec ike-group my-ike proposal 1 dh-group '14' set vpn ipsec ike-group my-ike proposal 1 encryption 'aes256' set vpn ipsec ike-group my-ike proposal 1 hash 'sha256' - set vpn ipsec esp-group my-esp compression 'disable' set vpn ipsec esp-group my-esp lifetime '3600' set vpn ipsec esp-group my-esp mode 'tunnel' set vpn ipsec esp-group my-esp pfs 'disable' -- cgit v1.2.3