roles/ipsec_policy_based/defaults/main.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

---
ipsec_policy_based_ike_group:
  name: IKE-GROUP
  key_exchange: ikev2
  lifetime: 28800
  dh_group: 14
  encryption: aes256
  hash: sha256
  close_action: start
  dead_peer_detection: {action: restart, interval: 10, timeout: 30}
ipsec_policy_based_esp_group:
  name: ESP-GROUP
  lifetime: 3600
  pfs: dh-group14
  encryption: aes256
  hash: sha256
ipsec_policy_based_default_gateway: ""
ipsec_policy_based_interfaces: []
ipsec_policy_based_options: {}