blob: 34da3d685c18e228682cc006cb8c5ad77f81308d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
strictcrlpolicy=no
plutostart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
conn carol
left=PH_IP_MOON
leftnexthop=%direct
leftcert=selfCert.der
leftsendcert=never
leftsubnet=10.1.0.0/16
right=%any
rightcert=peerCert.der
keyexchange=ikev2
auto=add
|