testing/tests/ikev2/net2net-esn/hosts/moon/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         crlcheckinterval=180
   5         strictcrlpolicy=no
   6         plutostart=no
   7         charondebug="cfg 2, knl 2"
   8
   9 conn %default
  10         ikelifetime=60m
  11         keylife=20m
  12         rekeymargin=3m
  13         keyingtries=1
  14         keyexchange=ikev2
  15         ike=aes128-sha1-modp1536!
  16         esp=aes128-sha1-esn-noesn!
  17         mobike=no
  18
  19 conn net-net
  20         left=PH_IP_MOON
  21         leftcert=moonCert.pem
  22         leftid=@moon.strongswan.org
  23         leftsubnet=10.1.0.0/16
  24         leftfirewall=yes
  25         right=PH_IP_SUN
  26         rightid=@sun.strongswan.org
  27         rightsubnet=10.2.0.0/16
  28         auto=add