97 lines
2.1 KiB
Plaintext
97 lines
2.1 KiB
Plaintext
# Do not edit this file. It is overwritten by VpnConf.
|
|
# SIGNATURE MD5 = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
# Creation Date : 2025-12-22 at 13:34:35
|
|
# Written by CyberoamServer XGS3300_RL01_SFOS 21.5.0 GA-Build171
|
|
# Client Version :
|
|
# CyberoamVPNClient :3.11.008
|
|
# IKE Service :3.10.08,02.13
|
|
|
|
[General]
|
|
Shared-SADB = Defined
|
|
Retransmits = 5
|
|
Exchange-max-time = 10
|
|
Default-phase-1-lifetime = 46800,360:86400
|
|
Bitblocking = 0
|
|
Xauth-interval = 20
|
|
DPD-interval = 30
|
|
DPD_retrans = 7
|
|
DPD_wait = 30
|
|
|
|
[Default-phase-2-lifetime]
|
|
LIFE_TYPE = SECONDS
|
|
LIFE_DURATION = 43200,360:86400
|
|
|
|
# ==================== PHASES 1 ====================
|
|
|
|
[Phase 1]
|
|
185.164.230.171 = APS_HH-P1
|
|
|
|
[APS_HH-main-mode]
|
|
DOI = IPSEC
|
|
EXCHANGE_TYPE = ID_PROT
|
|
Transforms = AES256-SHA2_256-GRP21
|
|
|
|
[AES256-SHA2_256-GRP21]
|
|
ENCRYPTION_ALGORITHM = AES_CBC
|
|
KEY_LENGTH = 256,128:256
|
|
HASH_ALGORITHM = SHA2_256
|
|
GROUP_DESCRIPTION = ECP521
|
|
AUTHENTICATION_METHOD = PRE_SHARED
|
|
Life = LIFE_MAIN_MODE
|
|
|
|
[APS_HH-P1]
|
|
Phase = 1
|
|
Family = IPV4
|
|
Address = 185.164.230.171
|
|
Transport = udp
|
|
Configuration = APS_HH-main-mode
|
|
Rconf = 1
|
|
Authentication = "tZfNkccrTq49wyvsxLak86jF"
|
|
Xauth = 0
|
|
Xpopup = 1
|
|
NATT_ENABLED = 1
|
|
|
|
|
|
# ==================== PHASES 2 ====================
|
|
|
|
[Phase 2]
|
|
Manual-connections = APS_HH-APS_HH1-P2
|
|
|
|
[APS_HH-APS_HH1-P2]
|
|
Phase = 2
|
|
ISAKMP-peer = APS_HH-P1
|
|
Remote-ID = APS_HH1-remote-addr
|
|
Configuration = APS_HH1-quick-mode
|
|
AutoStart = 0
|
|
USBStart = 0
|
|
|
|
# ==================== Ipsec ID ====================
|
|
|
|
[APS_HH1-remote-addr]
|
|
ID-type = IPV4_ADDR_SUBNET
|
|
Network = 0.0.0.0
|
|
Netmask = 0.0.0.0
|
|
|
|
# ==================== TRANSFORMS ====================
|
|
|
|
[APS_HH1-quick-mode]
|
|
DOI = IPSEC
|
|
EXCHANGE_TYPE = QUICK_MODE
|
|
Suites = APS_HH1-quick-mode-suite
|
|
|
|
[APS_HH1-quick-mode-suite]
|
|
Protocols = TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN
|
|
|
|
[TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN]
|
|
PROTOCOL_ID = IPSEC_ESP
|
|
Transforms = TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN-XF
|
|
|
|
[TGBQM-ESP-AES256-SHA2_256-PFSGRP21-TUN-XF]
|
|
TRANSFORM_ID = AES
|
|
KEY_LENGTH = 256,128:256
|
|
AUTHENTICATION_ALGORITHM = HMAC_SHA2_256
|
|
GROUP_DESCRIPTION = ECP521
|
|
ENCAPSULATION_MODE = TUNNEL
|
|
Life = Default-phase-2-lifetime
|
|
|