#mtu 1400;
#buffer sysbuffer(2048);
+# This is small enough that it fits without fragmentation into
+# the foolish wifi on Greater Anglia's now-retired Class 379s.
+# This is good because they mishandle fragmentation.
+mtu-target 1260;
+
# This defines the port that this instance of secnet will listen on, and
# originate packets on. It does not _have_ to correspond to the advertised
local-name "your-site-name";
local-key rsa-private("/etc/secnet/key");
+# Are we a mobile site?
+#local-mobile true;
+
# On dodgy links you may want to specify a higher maximum sequence number skew
transform eax-serpent { }, serpent256-cbc { };
sites map(site,all-sites);
# Or with a particular VPN
-sites map(site,vpn/Vexample/all-sites);
+#sites map(site,vpn/Vexample/all-sites);
# If you only want to communicate with a subset of the VPN sites, list
# them explicitly: