testing/tests/openssl-ikev2/rw-eap-tls-only/hosts/carol/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 conn %default
   4         ikelifetime=60m
   5         keylife=20m
   6         rekeymargin=3m
   7         keyingtries=1
   8         keyexchange=ikev2
   9         ike=aes128-sha256-ecp256!
  10         esp=aes128-sha256!
  11
  12 conn home
  13         left=PH_IP_CAROL
  14         leftcert=carolCert.pem
  15         leftauth=eap
  16         leftfirewall=yes
  17         right=PH_IP_MOON
  18         rightid="C=CH, O=Linux strongSwan, OU=ECDSA 521 bit, CN=moon.strongswan.org"
  19         rightauth=any
  20         rightsubnet=10.1.0.0/16
  21         rightsendcert=never
  22         auto=add