- import of strongswan-2.7.0
[strongswan.git] / testing / hosts / carol / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 version 2.0     # conforms to second version of ipsec.conf specification
4
5 config setup
6         plutodebug=control
7         crlcheckinterval=180
8         strictcrlpolicy=no
9
10 conn %default
11         ikelifetime=60m
12         keylife=20m
13         rekeymargin=3m
14         keyingtries=1
15
16 conn home
17         left=PH_IP_CAROL
18         leftnexthop=%direct
19         leftcert=carolCert.pem
20         leftid=carol@strongswan.org
21         leftfirewall=yes
22         right=PH_IP_MOON
23         rightsubnet=10.1.0.0/16
24         rightid=@moon.strongswan.org
25         auto=add
26
27
28
29