}
configs {
- test {
- proposal = aes128ctr-sha1-modp1024,aes128-sha1-modp1024
+ ike-ctr {
+ proposal = aes128ctr-aes128ccm8-aes128gcm8-aes128-sha1-modp1024
lhost = 172.16.1.20
rhost = 172.16.1.10
lid = ls.strongswan.org
rid = dut.strongswan.org
- child {
+ child-ctr {
lts = 10.20.20.1/24
rts = 10.10.10.1/24
}
actions {
initiate {
- config = child
- delay = 0
+ config = child-ctr
}
close_ike {
- config = test
+ config = ike-ctr
delay = 1
}
}
}
configs {
- test {
- proposal = aes128ctr-sha1-modp1024,aes128-sha1-modp1024
+ ike-ctr {
+ proposal = aes128ctr-aes128ccm8-aes128gcm8-aes128-sha1-modp1024
lhost = 172.16.1.20
rhost = 172.16.1.10
lid = ls.strongswan.org
rid = dut.strongswan.org
- child {
+ child-ctr {
lts = 10.20.20.1/24
rts = 10.10.10.1/24
}
actions {
initiate {
- config = child
- delay = 0
+ config = child-ctr
}
close_ike {
- config = test
+ config = ike-ctr
delay = 1
}
}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
initiate {
- config = child
- delay = 0
+ config = child-default
}
}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
initiate {
- config = child
- delay = 0
+ config = child-default
}
rekey_child {
- config = child
+ config = child-default
delay = 1
}
}
actions {
initiate {
- config = child
- delay = 0
+ config = child-default
}
liveness {
- config = test
+ config = ike-default
delay = 1
}
}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
initiate {
- config = child
- delay = 0
+ config = child-default
}
}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
initiate {
- config = child
- delay = 0
+ config = child-default
}
}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
liveness {
- config = test
+ config = ike-default
delay = 5
}
}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
liveness {
- config = test
+ config = ike-default
delay = 5
}
}
type = 40001
}
}
-
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
initiate {
- config = child
- delay = 0
+ config = child-default
}
}
}
}
-configs {
- test {
- proposal = aes128-sha1-modp1024
- lhost = 172.16.1.20
- rhost = 172.16.1.10
- lid = ls.strongswan.org
- rid = dut.strongswan.org
- child {
- lts = 10.20.20.1/24
- rts = 10.10.10.1/24
- }
- }
-}
-
actions {
initiate {
- config = child
- delay = 0
+ config = child-default
}
}
keys {
ecdsa = ls.key
}
+
+configs {
+ ike-default {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls.strongswan.org
+ rid = dut.strongswan.org
+ child-default {
+ lts = 10.20.20.1/24
+ rts = 10.10.10.1/24
+ }
+ }
+}