testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         crlcheckinterval=180
   5         strictcrlpolicy=no
   6         plutostart=no
   7
   8 conn %default
   9         ikelifetime=60m
  10         keylife=20m
  11         rekeymargin=3m
  12         keyingtries=1
  13         keyexchange=ikev2
  14         ike=aes256-sha256-modp2048!
  15
  16 conn home
  17         left=PH_IP_DAVE
  18         leftcert=daveCert.pem
  19         leftid=dave@strongswan.org
  20         leftfirewall=yes
  21         right=PH_IP_MOON
  22         rightid=@moon.strongswan.org
  23         rightsubnet=10.1.0.0/16
  24         auto=add