Untitled
unknown
plain_text
2 years ago
5.3 kB
3
Indexable
[TGBIKENG]
<?xml version="1.0" encoding="ISO-8859-1"?>
<tgbconfig>
<cfg_ikev2>
<cfg_connectionv2 name="CLUSTER">
<cfg_ike_sa name="CLUSTER" family="AF_AUTO">
<server>x.x.x.x</server>
<port>500</port>
<port_nat>4500</port_nat>
<ikeauth_lifetime>14400</ikeauth_lifetime>
<retries>3</retries>
<gateway_timeout>5</gateway_timeout>
<cfg_dynamic_param_lst />
<cfg_dpd>
<interval>30</interval>
<retrans>5</retrans>
<wait>5</wait>
</cfg_dpd>
<cfg_sa>
<proposal protocol="IKE">
<transform type="ENCR_ALGO" keylength="256">AES_GCM_16</transform>
<transform type="ENCR_ALGO" keylength="192">AES_GCM_16</transform>
<transform type="ENCR_ALGO" keylength="128">AES_GCM_16</transform>
<transform type="ENCR_ALGO" keylength="256">AES_CTR</transform>
<transform type="ENCR_ALGO" keylength="192">AES_CTR</transform>
<transform type="ENCR_ALGO" keylength="128">AES_CTR</transform>
<transform type="ENCR_ALGO" keylength="256">AES_CBC</transform>
<transform type="ENCR_ALGO" keylength="192">AES_CBC</transform>
<transform type="ENCR_ALGO" keylength="128">AES_CBC</transform>
<transform type="PRF">PRF_HMAC_SHA2_512</transform>
<transform type="PRF">PRF_HMAC_SHA2_384</transform>
<transform type="PRF">PRF_HMAC_SHA2_256</transform>
<transform type="INTEG">AUTH_HMAC_SHA2_512_256</transform>
<transform type="INTEG">AUTH_HMAC_SHA2_384_192</transform>
<transform type="INTEG">AUTH_HMAC_SHA2_256_128</transform>
<transform type="DH_GROUP">DH_BRAINPOOLP256_R1</transform>
<transform type="DH_GROUP">DH_ECP_521</transform>
<transform type="DH_GROUP">DH_ECP_384</transform>
<transform type="DH_GROUP">DH_ECP_256</transform>
<transform type="DH_GROUP">DH_MODP_8192</transform>
<transform type="DH_GROUP">DH_MODP_6144</transform>
<transform type="DH_GROUP">DH_MODP_4096</transform>
<transform type="DH_GROUP">DH_MODP_3072</transform>
<transform type="DH_GROUP">DH_MODP_2048</transform>
</proposal>
</cfg_sa>
<identity type="ID_RFC822_ADDR" location="local">replace.with.your.mail</identity>
<authentication type="preshared" sendcertrequest="no" />
</cfg_ike_sa>
<cfg_child_sa name="CLUSTER_VPN" family="AF_INET" requestconfig="yes" tunneltype="client2server">
<childsa_lifetime>1800</childsa_lifetime>
<cfg_sa>
<proposal protocol="ESP">
<transform type="ENCR_ALGO" keylength="128">AES_CBC</transform>
<transform type="ENCR_ALGO" keylength="192">AES_CBC</transform>
<transform type="ENCR_ALGO" keylength="256">AES_CBC</transform>
<transform type="ENCR_ALGO" keylength="128">AES_CTR</transform>
<transform type="ENCR_ALGO" keylength="192">AES_CTR</transform>
<transform type="ENCR_ALGO" keylength="256">AES_CTR</transform>
<transform type="ENCR_ALGO" keylength="128">AES_GCM_16</transform>
<transform type="ENCR_ALGO" keylength="192">AES_GCM_16</transform>
<transform type="ENCR_ALGO" keylength="256">AES_GCM_16</transform>
<transform type="INTEG">AUTH_HMAC_SHA2_256_128</transform>
<transform type="INTEG">AUTH_HMAC_SHA2_384_192</transform>
<transform type="INTEG">AUTH_HMAC_SHA2_512_256</transform>
<transform type="DH_GROUP">DH_BRAINPOOLP256_R1</transform>
<transform type="DH_GROUP">DH_ECP_256</transform>
<transform type="DH_GROUP">DH_ECP_384</transform>
<transform type="DH_GROUP">DH_ECP_521</transform>
<transform type="DH_GROUP">DH_MODP_8192</transform>
<transform type="DH_GROUP">DH_MODP_6144</transform>
<transform type="DH_GROUP">DH_MODP_4096</transform>
<transform type="DH_GROUP">DH_MODP_3072</transform>
<transform type="DH_GROUP">DH_MODP_2048</transform>
<transform type="ESN">NO_EXTENDED_SEQ_NUMBER</transform>
<transform type="ESN">EXTENDED_SEQ_NUMBER</transform>
</proposal>
</cfg_sa>
<cfg_ts type="IPV4_ADDR_RANGE" location="local">
<protocol>0</protocol>
<start_port>0</start_port>
<end_port>65535</end_port>
<starting_address>0.0.0.0</starting_address>
</cfg_ts>
<cfg_ts type="IPV4_ADDR_RANGE" location="remote">
<protocol>0</protocol>
<start_port>0</start_port>
<end_port>65535</end_port>
<starting_address>0.0.0.0</starting_address>
<ending_address>255.255.255.255</ending_address>
</cfg_ts>
<cfg_automation />
<cfg_remotesharing />
<cfg_dynamic_param_lst />
</cfg_child_sa>
</cfg_connectionv2>
</cfg_ikev2>
<cfg_cnxpanel>
<cfg_cnxpanel_connection name="CLUSTER-CLUSTER_VPN" tunnel="CLUSTER-CLUSTER_VPN" />
</cfg_cnxpanel>
<dialer_params />
</tgbconfig>Editor is loading...