projects / people / ms / strongswan.git / blame
| Commit | Line | Data |
|---|---|---|
| 701ece07 AS |
1 | # /etc/ipsec.conf - strongSwan IPsec configuration file |
| 2 | ||
| 3 | config setup | |
| 701ece07 AS |
4 | |
| 5 | conn %default | |
| 6 | ikelifetime=60m | |
| 7 | keylife=20m | |
| 8 | rekeymargin=3m | |
| 9 | keyingtries=1 | |
| 10 | keyexchange=ikev2 | |
| 11 | ||
| 12 | conn nat-t | |
| 13 | left=%defaultroute | |
| 14 | leftcert=aliceCert.pem | |
| 15 | leftid=alice@strongswan.org | |
| 16 | leftfirewall=yes | |
| 17 | right=PH_IP_SUN | |
| 18 | rightid=@sun.strongswan.org | |
| 19 | rightsubnet=10.2.0.0/16 | |
| 20 | forceencaps=yes | |
| 21 | auto=add |