|
@@ -46,7 +46,7 @@ auth-timeout = 64
|
|
|
rekey-time = 86400
|
|
|
rekey-method = ssl
|
|
|
deny-roaming = false
|
|
|
-# mtu = 1406
|
|
|
+mtu = 1412
|
|
|
try-mtu-discovery = true
|
|
|
output-buffer = 0
|
|
|
compression = false
|
|
@@ -60,7 +60,7 @@ dtls-psk = false
|
|
|
cisco-client-compat = true
|
|
|
tunnel-all-dns = true
|
|
|
isolate-workers = false
|
|
|
-tls-priorities = "PERFORMANCE:%SERVER_PRECEDENCE:%COMPAT:-VERS-ALL:-VERS-TLS-ALL:-VERS-DTLS-ALL:-VERS-SSL3.0:-ARCFOUR-128:+VERS-TLS1.2"
|
|
|
+tls-priorities = "PERFORMANCE:%SERVER_PRECEDENCE:%COMPAT:-VERS-ALL:-VERS-TLS-ALL:-VERS-DTLS-ALL:-VERS-SSL3.0:-ARCFOUR-128:+VERS-TLS1.2:+VERS-TLS1.3"
|
|
|
|
|
|
listen-host = 0.0.0.0
|
|
|
ipv4-network = 192.168.8.0
|