some scenario fixes
[strongswan.git] / testing / tests / ikev2 / config-payload / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         crlcheckinterval=180
5         strictcrlpolicy=no
6         plutostart=no
7
8 conn %default
9         ikelifetime=60m
10         keylife=20m
11         rekeymargin=3m
12         keyingtries=1
13         keyexchange=ikev2
14         left=PH_IP_MOON
15         leftsubnet=10.1.0.0/16
16         leftcert=moonCert.pem
17         leftid=@moon.strongswan.org
18         leftfirewall=yes
19
20 conn rw-carol
21         right=%any
22         rightid=carol@strongswan.org
23         rightsourceip=PH_IP_CAROL1
24         auto=add
25
26 conn rw-dave
27         right=%any
28         rightid=dave@strongswan.org
29         rightsourceip=PH_IP_DAVE1
30         auto=add