testing/tests/ikev1/xauth-rsa-config/hosts/dave/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4
   5 conn %default
   6         ikelifetime=60m
   7         keylife=20m
   8         rekeymargin=3m
   9         keyingtries=1
  10         keyexchange=ikev1
  11
  12 conn home
  13         left=PH_IP_DAVE
  14         leftsourceip=%config
  15         leftcert=daveCert.pem
  16         leftid=dave@strongswan.org
  17         leftauth=rsasig
  18         leftauth2=xauth
  19         leftfirewall=yes
  20         right=PH_IP_MOON
  21         rightsubnet=10.1.0.0/16
  22         rightid=@moon.strongswan.org
  23         rightauth=rsasig
  24         auto=add