testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4
   5 ca strongswan
   6         cacert=strongswanCert.pem
   7         certuribase=http://ip6-winnetou.strongswan.org/certs/
   8         crluri=http://ip6-winnetou.strongswan.org/strongswan.crl
   9         auto=add
  10
  11 conn %default
  12         ikelifetime=60m
  13         keylife=20m
  14         rekeymargin=3m
  15         keyingtries=1
  16         keyexchange=ikev1
  17         fragmentation=yes
  18
  19 conn net-net
  20         also=host-host
  21         leftsubnet=fec2::0/16
  22         rightsubnet=fec1::0/16
  23
  24 conn host-host
  25         left=PH_IP6_SUN
  26         leftcert=sunCert.pem
  27         leftid=@sun.strongswan.org
  28         leftfirewall=yes
  29         right=PH_IP6_MOON
  30         rightid=@moon.strongswan.org
  31         auto=add