testing/tests/ikev2/rw-psk-rsa-mixed/hosts/moon/etc/swanctl/swanctl.conf

   1 connections {
   2
   3    rw-psk {
   4       local_addrs  = 192.168.0.1
   5
   6       local {
   7          auth = psk
   8          id = moon.strongswan.org
   9       }
  10       remote {
  11          auth = psk
  12       }
  13       children {
  14          net {
  15             local_ts  = 10.1.0.0/16
  16
  17             updown = /usr/local/libexec/ipsec/_updown iptables
  18             esp_proposals = aes128gcm128-x25519
  19          }
  20       }
  21       version = 2
  22       proposals = aes128-sha256-x25519
  23    }
  24
  25 rw-pubkey {
  26       local_addrs  = 192.168.0.1
  27
  28       local {
  29          auth = pubkey
  30          certs = moonCert.pem
  31          id = moon.strongswan.org
  32       }
  33       remote {
  34          auth = pubkey
  35       }
  36       children {
  37          net {
  38             local_ts  = 10.1.0.0/16
  39
  40             updown = /usr/local/libexec/ipsec/_updown iptables
  41             esp_proposals = aes128gcm128-x25519
  42          }
  43       }
  44       version = 2
  45       proposals = aes128-sha256-x25519
  46    }
  47 }
  48
  49 secrets {
  50
  51    ike-carol {
  52       id = carol@strongswan.org
  53       secret = 0sFpZAZqEN6Ti9sqt4ZP5EWcqx
  54    }
  55 }