testing/tests/gcrypt-ikev2/rw-cert/hosts/moon/etc/swanctl/swanctl.conf

   1 connections {
   2
   3    rw {
   4       local_addrs  = 192.168.0.1
   5
   6       local {
   7          auth = pubkey
   8          certs = moonCert.pem
   9          id = moon.strongswan.org
  10       }
  11       remote {
  12          auth = pubkey
  13       }
  14       children {
  15          net {
  16             local_ts  = 10.1.0.0/16
  17
  18             updown = /usr/local/libexec/ipsec/_updown iptables
  19             esp_proposals = aes128-sha256-modp3072,3des-sha1-modp1536
  20          }
  21       }
  22       version = 2
  23       proposals = aes128-sha256-modp3072,3des-sha1-modp1536
  24    }
  25 }