testing/tests/ikev2-stroke-bye/nat-rw-mark/hosts/alice/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4
   5 conn %default
   6         ikelifetime=60m
   7         keylife=20m
   8         rekeymargin=3m
   9         keyingtries=1
  10         keyexchange=ikev2
  11
  12 conn nat-t
  13         left=%defaultroute
  14         leftsubnet=10.1.0.0/25
  15         leftcert=aliceCert.pem
  16         leftid=alice@strongswan.org
  17         leftfirewall=yes
  18         lefthostaccess=yes
  19         right=PH_IP_SUN
  20         rightid=@sun.strongswan.org
  21         rightsubnet=10.2.0.0/16
  22         auto=add