added nonce plugin in default host configurations
[strongswan.git] / testing / hosts / alice / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         plutodebug=control
5         crlcheckinterval=180
6         strictcrlpolicy=no
7         nat_traversal=yes
8         charonstart=no
9
10 conn %default
11         ikelifetime=60m
12         keylife=20m
13         rekeymargin=3m
14         keyingtries=1
15         keyexchange=ikev1
16                 
17 conn nat-t
18         left=%defaultroute
19         leftcert=aliceCert.pem
20         leftid=alice@strongswan.org
21         leftfirewall=yes
22         right=PH_IP_SUN
23         rightid=@sun.strongswan.org
24         rightsubnet=10.2.0.0/16
25         auto=add