added
[strongswan.git] / testing / tests / ikev2 / config-payload-swapped / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         crlcheckinterval=180
5         strictcrlpolicy=no
6         plutostart=no
7
8 conn %default
9         ikelifetime=60m
10         keylife=20m
11         rekeymargin=3m
12         keyingtries=1
13         keyexchange=ikev2
14         right=PH_IP_MOON
15         rightsubnet=10.1.0.0/16
16         rightsourceip=PH_IP_MOON1
17         rightnexthop=%direct
18         rightcert=moonCert.pem
19         rightid=@moon.strongswan.org
20         rightfirewall=yes
21
22 conn rw-carol
23         left=%any
24         leftid=carol@strongswan.org
25         leftsourceip=PH_IP_CAROL1
26         auto=add
27
28 conn rw-dave
29         left=%any
30         leftid=dave@strongswan.org
31         leftsourceip=PH_IP_DAVE1
32         auto=add