testing: Use reauthentication and set CHILD_SA rekey time, bytes and packets limits

2016-05-04 18:13:52 +02:00
parent b1df631212
commit ff4e01dab5
2 changed files with 8 additions and 0 deletions
@@ -19,11 +19,15 @@ connections {
            remote_ts = 10.2.0.0/16 

            updown = /usr/local/libexec/ipsec/_updown iptables
+            rekey_time = 5400
+            rekey_bytes = 500000000
+            rekey_packets = 1000000
            esp_proposals = aes128gcm128-modp3072
         }
      }
      version = 2
      mobike = no
+      reauth_time = 10800
      proposals = aes128-sha256-modp3072
   }
 }
@@ -19,11 +19,15 @@ connections {
            remote_ts = 10.1.0.0/16 

            updown = /usr/local/libexec/ipsec/_updown iptables
+            rekey_time = 5400
+            rekey_bytes = 500000000
+            rekey_packets = 1000000
            esp_proposals = aes128gcm128-modp3072
         }
      }
      version = 2
      mobike = no
+      reauth_time = 10800
      proposals = aes128-sha256-modp3072
   }
 }