testing/hosts/alice/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 version 2.0     # conforms to second version of ipsec.conf specification
   4
   5 config setup
   6         plutodebug=control
   7         crlcheckinterval=180
   8         strictcrlpolicy=no
   9         nat_traversal=yes
  10         charonstart=no
  11
  12 conn %default
  13         ikelifetime=60m
  14         keylife=20m
  15         rekeymargin=3m
  16         keyingtries=1
  17
  18 conn nat-t
  19         left=%defaultroute
  20         leftcert=aliceCert.pem
  21         leftid=alice@strongswan.org
  22         leftfirewall=yes
  23         right=PH_IP_SUN
  24         rightid=@sun.strongswan.org
  25         rightsubnet=10.2.0.0/16
  26         auto=add