projects / people / ms / strongswan.git / blame
| Commit | Line | Data |
|---|---|---|
| 545ed7dd AS |
1 | # /etc/ipsec.conf - strongSwan IPsec configuration file |
| 2 | ||
| 3 | config setup | |
| 545ed7dd AS |
4 | |
| 5 | conn %default | |
| 6 | ikelifetime=60m | |
| 7 | keylife=20m | |
| 8 | rekeymargin=3m | |
| 9 | keyingtries=1 | |
| 10 | keyexchange=ikev2 | |
| 11 | mobike=no | |
| 12 | dpdaction=restart | |
| 13 | dpddelay=60s | |
| 14 | left=%defaultroute | |
| 15 | leftfirewall=yes | |
| 16 | ||
| 17 | conn medsrv | |
| 18 | leftid=6cu1UTVw@medsrv.org | |
| 8a5a33b5 | 19 | leftauth=psk |
| 545ed7dd AS |
20 | right=PH_IP_CAROL |
| 21 | rightid=carol@strongswan.org | |
| 8a5a33b5 | 22 | rightauth=pubkey |
| e74bc8e5 | 23 | mediation=yes |
| 545ed7dd AS |
24 | auto=add |
| 25 | ||
| dc04b7c7 | 26 | conn peer |
| 545ed7dd AS |
27 | leftcert=aliceCert.pem |
| 28 | leftid=alice@strongswan.org | |
| 29 | right=%any | |
| 30 | rightid=bob@strongswan.org | |
| 31 | rightsubnet=PH_IP_BOB/32 | |
| e74bc8e5 TB |
32 | mediated_by=medsrv |
| 33 | me_peerid=av9oEPMz@medsrv.org | |
| 545ed7dd | 34 | auto=start |