3be21d05521a867783ade4e3eacf203f7d5c508b
[strongswan.git] / testing / tests / ike / rw-cert / hosts / dave / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         strictcrlpolicy=no
5         plutostart=no
6
7 conn %default
8         ikelifetime=60m
9         keylife=20m
10         rekeymargin=3m
11         keyingtries=1
12         keyexchange=ikev2
13
14 conn home
15         left=PH_IP_DAVE
16         leftcert=daveCert.pem
17         leftid=dave@strongswan.org
18         right=PH_IP_MOON
19         rightid=@moon.strongswan.org
20         rightsubnet=10.1.0.0/16
21         auto=add