.. | .. |
---|
264 | 264 | ip -netns host1 xfrm state add src ${HOST1_4} dst ${HOST2_4} \ |
---|
265 | 265 | proto esp spi ${SPI_1} reqid 0 mode tunnel \ |
---|
266 | 266 | replay-window 4 replay-oseq 0x4 \ |
---|
267 | | - auth-trunc 'hmac(md5)' ${AUTH_1} 96 \ |
---|
268 | | - enc 'cbc(des3_ede)' ${ENC_1} \ |
---|
| 267 | + auth-trunc 'hmac(sha1)' ${AUTH_1} 96 \ |
---|
| 268 | + enc 'cbc(aes)' ${ENC_1} \ |
---|
269 | 269 | sel src ${h1_4} dst ${h2_4} ${devarg} |
---|
270 | 270 | |
---|
271 | 271 | ip -netns host2 xfrm state add src ${HOST1_4} dst ${HOST2_4} \ |
---|
272 | 272 | proto esp spi ${SPI_1} reqid 0 mode tunnel \ |
---|
273 | 273 | replay-window 4 replay-oseq 0x4 \ |
---|
274 | | - auth-trunc 'hmac(md5)' ${AUTH_1} 96 \ |
---|
275 | | - enc 'cbc(des3_ede)' ${ENC_1} \ |
---|
| 274 | + auth-trunc 'hmac(sha1)' ${AUTH_1} 96 \ |
---|
| 275 | + enc 'cbc(aes)' ${ENC_1} \ |
---|
276 | 276 | sel src ${h1_4} dst ${h2_4} |
---|
277 | 277 | |
---|
278 | 278 | |
---|
279 | 279 | ip -netns host1 xfrm state add src ${HOST2_4} dst ${HOST1_4} \ |
---|
280 | 280 | proto esp spi ${SPI_2} reqid 0 mode tunnel \ |
---|
281 | 281 | replay-window 4 replay-oseq 0x4 \ |
---|
282 | | - auth-trunc 'hmac(md5)' ${AUTH_2} 96 \ |
---|
283 | | - enc 'cbc(des3_ede)' ${ENC_2} \ |
---|
| 282 | + auth-trunc 'hmac(sha1)' ${AUTH_2} 96 \ |
---|
| 283 | + enc 'cbc(aes)' ${ENC_2} \ |
---|
284 | 284 | sel src ${h2_4} dst ${h1_4} ${devarg} |
---|
285 | 285 | |
---|
286 | 286 | ip -netns host2 xfrm state add src ${HOST2_4} dst ${HOST1_4} \ |
---|
287 | 287 | proto esp spi ${SPI_2} reqid 0 mode tunnel \ |
---|
288 | 288 | replay-window 4 replay-oseq 0x4 \ |
---|
289 | | - auth-trunc 'hmac(md5)' ${AUTH_2} 96 \ |
---|
290 | | - enc 'cbc(des3_ede)' ${ENC_2} \ |
---|
| 289 | + auth-trunc 'hmac(sha1)' ${AUTH_2} 96 \ |
---|
| 290 | + enc 'cbc(aes)' ${ENC_2} \ |
---|
291 | 291 | sel src ${h2_4} dst ${h1_4} |
---|
292 | 292 | |
---|
293 | 293 | |
---|
294 | 294 | ip -6 -netns host1 xfrm state add src ${HOST1_6} dst ${HOST2_6} \ |
---|
295 | 295 | proto esp spi ${SPI_1} reqid 0 mode tunnel \ |
---|
296 | 296 | replay-window 4 replay-oseq 0x4 \ |
---|
297 | | - auth-trunc 'hmac(md5)' ${AUTH_1} 96 \ |
---|
298 | | - enc 'cbc(des3_ede)' ${ENC_1} \ |
---|
| 297 | + auth-trunc 'hmac(sha1)' ${AUTH_1} 96 \ |
---|
| 298 | + enc 'cbc(aes)' ${ENC_1} \ |
---|
299 | 299 | sel src ${h1_6} dst ${h2_6} ${devarg} |
---|
300 | 300 | |
---|
301 | 301 | ip -6 -netns host2 xfrm state add src ${HOST1_6} dst ${HOST2_6} \ |
---|
302 | 302 | proto esp spi ${SPI_1} reqid 0 mode tunnel \ |
---|
303 | 303 | replay-window 4 replay-oseq 0x4 \ |
---|
304 | | - auth-trunc 'hmac(md5)' ${AUTH_1} 96 \ |
---|
305 | | - enc 'cbc(des3_ede)' ${ENC_1} \ |
---|
| 304 | + auth-trunc 'hmac(sha1)' ${AUTH_1} 96 \ |
---|
| 305 | + enc 'cbc(aes)' ${ENC_1} \ |
---|
306 | 306 | sel src ${h1_6} dst ${h2_6} |
---|
307 | 307 | |
---|
308 | 308 | |
---|
309 | 309 | ip -6 -netns host1 xfrm state add src ${HOST2_6} dst ${HOST1_6} \ |
---|
310 | 310 | proto esp spi ${SPI_2} reqid 0 mode tunnel \ |
---|
311 | 311 | replay-window 4 replay-oseq 0x4 \ |
---|
312 | | - auth-trunc 'hmac(md5)' ${AUTH_2} 96 \ |
---|
313 | | - enc 'cbc(des3_ede)' ${ENC_2} \ |
---|
| 312 | + auth-trunc 'hmac(sha1)' ${AUTH_2} 96 \ |
---|
| 313 | + enc 'cbc(aes)' ${ENC_2} \ |
---|
314 | 314 | sel src ${h2_6} dst ${h1_6} ${devarg} |
---|
315 | 315 | |
---|
316 | 316 | ip -6 -netns host2 xfrm state add src ${HOST2_6} dst ${HOST1_6} \ |
---|
317 | 317 | proto esp spi ${SPI_2} reqid 0 mode tunnel \ |
---|
318 | 318 | replay-window 4 replay-oseq 0x4 \ |
---|
319 | | - auth-trunc 'hmac(md5)' ${AUTH_2} 96 \ |
---|
320 | | - enc 'cbc(des3_ede)' ${ENC_2} \ |
---|
| 319 | + auth-trunc 'hmac(sha1)' ${AUTH_2} 96 \ |
---|
| 320 | + enc 'cbc(aes)' ${ENC_2} \ |
---|
321 | 321 | sel src ${h2_6} dst ${h1_6} |
---|
322 | 322 | } |
---|
323 | 323 | |
---|