[thirdparty/strongswan.git] / testing / tests / ikev2 / crl-from-cache / hosts / moon / etc / ipsec.conf

# /etc/ipsec.conf - strongSwan IPsec configuration file

config setup
	strictcrlpolicy=yes

conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	keyingtries=1
	keyexchange=ikev2

conn rw
	left=PH_IP_MOON
	leftcert=moonCert.pem
	leftid=@moon.strongswan.org
	leftsubnet=10.1.0.0/16
	right=%any
	auto=add
Commit	Line	Data
7771780b AS	1	# /etc/ipsec.conf - strongSwan IPsec configuration file
	2
	3	config setup
7771780b	4	strictcrlpolicy=yes
7771780b AS	5
	6	conn %default
	7	ikelifetime=60m
	8	keylife=20m
	9	rekeymargin=3m
	10	keyingtries=1
	11	keyexchange=ikev2
	12
	13	conn rw
	14	left=PH_IP_MOON
7771780b AS	15	leftcert=moonCert.pem
	16	leftid=@moon.strongswan.org
	17	leftsubnet=10.1.0.0/16
	18	right=%any
	19	auto=add