testing/hosts/sun/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         plutodebug=control
   5         crlcheckinterval=180
   6         strictcrlpolicy=no
   7         nat_traversal=yes
   8         charonstart=no
   9
  10 conn %default
  11         ikelifetime=60m
  12         keylife=20m
  13         rekeymargin=3m
  14         keyingtries=1
  15         left=PH_IP_SUN
  16         leftcert=sunCert.pem
  17         leftid=@sun.strongswan.org
  18         leftfirewall=yes
  19
  20 conn net-net
  21         leftsubnet=10.2.0.0/16
  22         right=PH_IP_MOON
  23         rightsubnet=10.1.0.0/16
  24         rightid=@moon.strongswan.org
  25         auto=add
  26
  27 conn host-host
  28         right=PH_IP_MOON
  29         rightid=@moon.strongswan.org
  30         auto=add
  31
  32 conn nat-t
  33         leftsubnet=10.2.0.0/16
  34         right=%any
  35         rightsubnetwithin=10.1.0.0/16
  36         auto=add