testing/tests/ikev2/double-nat/hosts/bob/etc/swanctl/swanctl.conf

   1 connections {
   2
   3    nat-t {
   4
   5       local {
   6          auth = pubkey
   7          certs = bobCert.pem
   8          id = bob@strongswan.org
   9       }
  10       remote {
  11          auth = pubkey
  12       }
  13       children {
  14          nat-t {
  15             remote_ts = 10.1.0.0/16
  16
  17             updown = /usr/local/libexec/ipsec/_updown iptables
  18             esp_proposals = aes128gcm128-x25519
  19          }
  20       }
  21       version = 2
  22       proposals = aes128-sha256-x25519
  23    }
  24 }