testing/tests/gcrypt-ikev2/alg-camellia/hosts/carol/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         crlcheckinterval=180
   5         strictcrlpolicy=yes
   6         plutostart=no
   7
   8 conn %default
   9         ikelifetime=60m
  10         keylife=20m
  11         rekeymargin=3m
  12         keyingtries=1
  13         keyexchange=ikev2
  14         ike=camellia256-sha512-modp2048!
  15         esp=camellia192-sha1!
  16
  17 conn home
  18         left=PH_IP_CAROL
  19         leftfirewall=yes
  20         leftcert=carolCert.pem
  21         leftid=carol@strongswan.org
  22         right=PH_IP_MOON
  23         rightsubnet=10.1.0.0/16
  24         rightid=@moon.strongswan.org
  25         auto=add