- applied andreas's patch
[strongswan.git] / testing / hosts / alice / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 version 2.0     # conforms to second version of ipsec.conf specification
4
5 config setup
6         plutodebug=control
7         crlcheckinterval=180
8         strictcrlpolicy=no
9         nat_traversal=yes
10         charonstart=no
11
12 conn %default
13         ikelifetime=60m
14         keylife=20m
15         rekeymargin=3m
16         keyingtries=1
17                 
18 conn nat-t
19         left=%defaultroute
20         leftcert=aliceCert.pem
21         leftid=alice@strongswan.org
22         leftfirewall=yes
23         right=PH_IP_SUN
24         rightid=@sun.strongswan.org
25         rightsubnet=10.2.0.0/16
26         auto=add