]>
Commit | Line | Data |
---|---|---|
547f1dd5 AS |
1 | # /etc/ipsec.conf - strongSwan IPsec configuration file |
2 | ||
3 | config setup | |
547f1dd5 AS |
4 | |
5 | conn %default | |
6 | ikelifetime=60m | |
7 | keylife=20m | |
8 | rekeymargin=3m | |
9 | keyingtries=1 | |
a44bb934 MW |
10 | keyexchange=ikev2 |
11 | ike=blowfish128-sha256-modp1536! | |
3805e569 | 12 | esp=blowfish128-sha256! |
547f1dd5 AS |
13 | |
14 | conn home | |
15 | left=PH_IP_DAVE | |
547f1dd5 AS |
16 | leftcert=daveCert.pem |
17 | leftid=dave@strongswan.org | |
18 | leftfirewall=yes | |
19 | right=PH_IP_MOON | |
20 | rightid=@moon.strongswan.org | |
21 | rightsubnet=10.1.0.0/16 | |
547f1dd5 | 22 | auto=add |