X-Git-Url: https://git.distorted.org.uk/~mdw/secnet/blobdiff_plain/b2a56f7c93d221607864761c590952b9a614dc9f..c6f79b178fe27ee315055dccb371b63ca1a6183a:/example.conf diff --git a/example.conf b/example.conf index 03e5f43..189b442 100644 --- a/example.conf +++ b/example.conf @@ -60,6 +60,9 @@ system { # wait-time wait between unsuccessful key setup attempts, in ms # renegotiate-time set up a new key if we see any traffic after this time +setup-retries 10; +setup-timeout 2000; + # Use the universal TUN/TAP driver to get packets to and from the kernel # (use tun-old if you are not on Linux-2.4) netlink tun { @@ -125,6 +128,8 @@ log-events "setup-init","setup-timeout","activate-key","timeout-key","errors", # that it's non-blocking. XXX 'yes' isn't implemented yet. random randomfile("/dev/urandom",no); +# If you're using the make-secnet-sites.py script then your local-name +# will be of the form "vpnname/location/site" eg. "sgo/greenend/sinister" local-name "your-site-name"; local-key rsa-private("/etc/secnet/key");