summaryrefslogtreecommitdiff
path: root/templates/vpn
diff options
context:
space:
mode:
authorRyan Riske <ryanriske@gmail.com>2014-05-25 15:29:41 -0500
committerRyan Riske <ryanriske@gmail.com>2014-05-25 15:29:41 -0500
commit0f3bf9f0495a0525fb77114b689865229e13ac4d (patch)
tree73c05d55059f225e03dc063c78484935d8d62fd4 /templates/vpn
parentcb7c2c8eb55a29957514b7862fa77ea660fdbc50 (diff)
downloadvyatta-cfg-vpn-0f3bf9f0495a0525fb77114b689865229e13ac4d.tar.gz
vyatta-cfg-vpn-0f3bf9f0495a0525fb77114b689865229e13ac4d.zip
Bug 197: Add back support for groups 22-24 for phase2 pfs
Diffstat (limited to 'templates/vpn')
-rw-r--r--templates/vpn/ipsec/esp-group/node.tag/pfs/node.def5
1 files changed, 4 insertions, 1 deletions
diff --git a/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def b/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def
index 53648a6..59a46ec 100644
--- a/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def
+++ b/templates/vpn/ipsec/esp-group/node.tag/pfs/node.def
@@ -1,7 +1,7 @@
help: ESP Perfect Forward Secrecy
type: txt
default: "enable"
-syntax:expression: $VAR(@) in "enable", "disable", "dh-group2", "dh-group5", "dh-group14", "dh-group15", "dh-group16", "dh-group17", "dh-group18", "dh-group19", "dh-group20", "dh-group21", "dh-group25", "dh-group26"; "must be enable, disable, dh-group2, dh-group5, dh-group14, dh-group15, dh-group16, dh-group17, dh-group18, dh-group19, dh-group20, dh-group21, dh-group25 or dh-group26"
+syntax:expression: $VAR(@) in "enable", "disable", "dh-group2", "dh-group5", "dh-group14", "dh-group15", "dh-group16", "dh-group17", "dh-group18", "dh-group19", "dh-group20", "dh-group21", "dh-group22", "dh-group23", "dh-group24", "dh-group25", "dh-group26"; "must be enable, disable, dh-group2, dh-group5, dh-group14, dh-group15, dh-group16, dh-group17, dh-group18, dh-group19, dh-group20, dh-group21, dh-group22, dh-group23, dh-group24, dh-group25 or dh-group26"
val_help: enable; Enable PFS. Use ike-group's dh-group (default)
val_help: dh-group2; Enable PFS. Use Diffie-Hellman group 2 (modp1024)
val_help: dh-group5; Enable PFS. Use Diffie-Hellman group 5 (modp1536)
@@ -13,6 +13,9 @@ val_help: dh-group18; Enable PFS. Use Diffie-Hellman group 18 (modp8192)
val_help: dh-group19; Enable PFS. Use Diffie-Hellman group 19 (ecp256)
val_help: dh-group20; Enable PFS. Use Diffie-Hellman group 20 (ecp384)
val_help: dh-group21; Enable PFS. Use Diffie-Hellman group 21 (ecp521)
+val_help: dh-group22; Enable PFS. Use Diffie-Hellman group 22 (modp1024s160)
+val_help: dh-group23; Enable PFS. Use Diffie-Hellman group 23 (modp2048s224)
+val_help: dh-group24; Enable PFS. Use Diffie-Hellman group 24 (modp2048s256)
val_help: dh-group25; Enable PFS. Use Diffie-Hellman group 25 (ecp192)
val_help: dh-group26; Enable PFS. Use Diffie-Hellman group 26 (ecp224)
val_help: disable; Disable PFS