[people/ms/strongswan.git] / testing / tests / ikev2-stroke-bye / net2net-same-nets / hosts / moon / etc / ipsec.conf

# /etc/ipsec.conf - strongSwan IPsec configuration file

config setup

conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	keyingtries=1
	keyexchange=ikev2
	mobike=no

conn net-net 
	left=PH_IP_MOON
	leftcert=moonCert.pem
	leftid=@moon.strongswan.org
	leftsubnet=10.0.0.0/14
	leftfirewall=yes
	right=PH_IP_SUN
	rightid=@sun.strongswan.org
	rightsubnet=10.4.0.0/14
	auto=add
Commit	Line	Data
c74c4c2a AS	1	# /etc/ipsec.conf - strongSwan IPsec configuration file
	2
	3	config setup
c74c4c2a AS	4
	5	conn %default
	6	ikelifetime=60m
	7	keylife=20m
	8	rekeymargin=3m
	9	keyingtries=1
	10	keyexchange=ikev2
	11	mobike=no
	12
	13	conn net-net
	14	left=PH_IP_MOON
	15	leftcert=moonCert.pem
	16	leftid=@moon.strongswan.org
	17	leftsubnet=10.0.0.0/14
	18	leftfirewall=yes
	19	right=PH_IP_SUN
	20	rightid=@sun.strongswan.org
	21	rightsubnet=10.4.0.0/14
	22	auto=add