]> git.ipfire.org Git - thirdparty/strongswan.git/blob - testing/tests/ikev2/esp-alg-camellia/hosts/carol/etc/ipsec.conf
support of the ESP CAMELLIA-CBC cipher by charon
[thirdparty/strongswan.git] / testing / tests / ikev2 / esp-alg-camellia / hosts / carol / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4 crlcheckinterval=180
5 strictcrlpolicy=yes
6 plutostart=no
7
8 conn %default
9 ikelifetime=60m
10 keylife=20m
11 rekeymargin=3m
12 keyingtries=1
13 keyexchange=ikev2
14 ike=aes192-sha1-modp2048!
15 esp=camellia192-sha1!
16
17 conn home
18 left=PH_IP_CAROL
19 leftfirewall=yes
20 leftcert=carolCert.pem
21 leftid=carol@strongswan.org
22 right=PH_IP_MOON
23 rightsubnet=10.1.0.0/16
24 rightid=@moon.strongswan.org
25 auto=add