testing/tests/ikev2-stroke-bye/rw-sig-auth/hosts/dave/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4
   5 conn %default
   6         ikelifetime=60m
   7         keylife=20m
   8         rekeymargin=3m
   9         keyingtries=1
  10         keyexchange=ikev2
  11
  12 conn alice
  13         rightsubnet=10.1.0.10/32
  14         also=home
  15         auto=add
  16
  17 conn venus
  18         rightsubnet=10.1.0.20/32
  19         also=home
  20         auto=add
  21
  22 conn home
  23         left=%any
  24         leftcert=daveCert.pem
  25         leftauth=pubkey-sha512
  26         leftfirewall=yes
  27         right=PH_IP_MOON
  28         rightid=@moon.strongswan.org
  29         rightauth=pubkey