testing/tests/ike/rw-cert/hosts/dave/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         strictcrlpolicy=no
   5         plutostart=no
   6
   7 conn %default
   8         ikelifetime=60m
   9         keylife=20m
  10         rekeymargin=3m
  11         keyingtries=1
  12         keyexchange=ikev2
  13
  14 conn home
  15         left=PH_IP_DAVE
  16         leftcert=daveCert.pem
  17         leftid=dave@strongswan.org
  18         right=PH_IP_MOON
  19         rightid=@moon.strongswan.org
  20         rightsubnet=10.1.0.0/16
  21         auto=add