testing/tests/libipsec/net2net-cert-ipv6/hosts/moon/etc/swanctl/swanctl.conf

   1 connections {
   2
   3    gw-gw {
   4       local_addrs  = 192.168.0.1
   5       remote_addrs = 192.168.0.2
   6
   7       local {
   8          auth = pubkey
   9          certs = moonCert.pem
  10          id = moon.strongswan.org
  11       }
  12       remote {
  13          auth = pubkey
  14          id = sun.strongswan.org
  15       }
  16       children {
  17          net-net {
  18             local_ts  = fec1::0/16[ipv6-icmp]
  19             remote_ts = fec2::0/16[ipv6-icmp]
  20
  21             updown = /etc/updown
  22             esp_proposals = aes256gcm128-ecp384
  23          }
  24       }
  25       version = 2
  26       mobike = no
  27       proposals = aes256-sha384-ecp384
  28    }
  29 }