testing/tests/ikev2-stroke-bye/net2net-psk-dscp/hosts/sun/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 conn %default
   4         ikelifetime=60m
   5         keylife=20m
   6         rekeymargin=3m
   7         keyingtries=1
   8         keyexchange=ikev2
   9         mobike=no
  10
  11 conn dscp-be
  12         leftid=@sun-be
  13         rightid=@moon-be
  14         mark=10
  15         also=net-net
  16         auto=add
  17
  18 conn dscp-ef
  19         leftid=@sun-ef
  20         rightid=@moon-ef
  21         mark=20
  22         also=net-net
  23         auto=add
  24
  25 conn net-net
  26         left=PH_IP_SUN
  27         leftsubnet=10.2.0.0/16
  28         leftfirewall=yes
  29         leftauth=psk
  30         right=PH_IP_MOON
  31         rightsubnet=10.1.0.0/16
  32         rightauth=psk