added
[strongswan.git] / testing / tests / ikev1 / mode-config-push / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         plutodebug=control
5         crlcheckinterval=180
6         strictcrlpolicy=no
7         charonstart=no
8
9 conn %default
10         ikelifetime=60m
11         keylife=20m
12         rekeymargin=3m
13         keyingtries=1
14         modeconfig=push
15         left=PH_IP_MOON
16         leftsubnet=10.1.0.0/16
17         leftsourceip=PH_IP_MOON1
18         leftnexthop=%direct
19         leftcert=moonCert.pem
20         leftid=@moon.strongswan.org
21         leftfirewall=yes
22
23 conn rw-carol
24         right=%any
25         rightid=carol@strongswan.org
26         rightsourceip=PH_IP_CAROL1
27         auto=add
28
29 conn rw-dave
30         right=%any
31         rightid=dave@strongswan.org
32         rightsourceip=PH_IP_DAVE1
33         auto=add