fc3eea283d8b73fbb96a404fd17c715a05a9c192
[strongswan.git] / testing / tests / af-alg / rw-cert / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4
5 conn %default
6         ikelifetime=60m
7         keylife=20m
8         rekeymargin=3m
9         keyingtries=1
10         keyexchange=ikev2
11         ike=aes128-sha256-modp2048,3des-sha1-modp1536!
12         esp=aes128-sha256,3des-sha1!
13
14 conn rw
15         left=PH_IP_MOON
16         leftcert=moonCert.pem
17         leftid=@moon.strongswan.org
18         leftsubnet=10.1.0.0/16
19         leftfirewall=yes
20         right=%any
21         auto=add