Monday, June 10, 2019

Re: IPsec bandwidth perf on APU4C4

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, June 10, 2019 7:09 PM, Christian Weisgerber <naddy@mips.inka.de> wrote:

> No "auth". AES-GCM is an authenticated encryption algorithm, i.e.,
> it handles both encryption and authentication at the same time.
> Specifying an additional "auth" algorithm doesn't make sense.

Last question hopefully... Reading the iked.conf man page I conclude that all I need for that is to add to my ikev2 config is the following additional parameter:

childsa enc aes-128-gcm

is this correct?

No comments:

Post a Comment