[people/ms/strongswan.git] / testing / tests / ikev2-stroke-bye / net2net-cert-sha2 / hosts / sun / etc / ipsec.conf

# /etc/ipsec.conf - strongSwan IPsec configuration file

config setup

conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
    keyingtries=1
	keyexchange=ikev2
	mobike=no

conn net-net
	left=PH_IP_SUN
	leftcert=sunCert.pem
	leftauth=rsa-sha512
	leftid=@sun.strongswan.org
	leftsubnet=10.2.0.0/16
	leftfirewall=yes
	right=PH_IP_MOON
	rightid=@moon.strongswan.org
	rightsubnet=10.1.0.0/16
	auto=add
Commit	Line	Data
3b31245a TB	1	# /etc/ipsec.conf - strongSwan IPsec configuration file
	2
	3	config setup
	4
	5	conn %default
	6	ikelifetime=60m
	7	keylife=20m
	8	rekeymargin=3m
	9	keyingtries=1
	10	keyexchange=ikev2
	11	mobike=no
	12
	13	conn net-net
	14	left=PH_IP_SUN
	15	leftcert=sunCert.pem
	16	leftauth=rsa-sha512
	17	leftid=@sun.strongswan.org
	18	leftsubnet=10.2.0.0/16
	19	leftfirewall=yes
	20	right=PH_IP_MOON
	21	rightid=@moon.strongswan.org
	22	rightsubnet=10.1.0.0/16
	23	auto=add