testing/hosts/carol/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 version 2.0     # conforms to second version of ipsec.conf specification
   4
   5 config setup
   6         plutodebug=control
   7         crlcheckinterval=180
   8         strictcrlpolicy=no
   9
  10 conn %default
  11         ikelifetime=60m
  12         keylife=20m
  13         rekeymargin=3m
  14         keyingtries=1
  15
  16 conn home
  17         left=PH_IP_CAROL
  18         leftnexthop=%direct
  19         leftcert=carolCert.pem
  20         leftid=carol@strongswan.org
  21         leftfirewall=yes
  22         right=PH_IP_MOON
  23         rightsubnet=10.1.0.0/16
  24         rightid=@moon.strongswan.org
  25         auto=add
  26
  27
  28
  29