added ikev2/net2net-esn scenario
[strongswan.git] / testing / tests / ikev2 / net2net-esn / hosts / sun / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         crlcheckinterval=180
5         strictcrlpolicy=no
6         plutostart=no
7         charondebug="cfg 2, knl 2"
8
9 conn %default
10         ikelifetime=60m
11         keylife=20m
12         rekeymargin=3m
13         keyingtries=1
14         keyexchange=ikev2
15         ike=aes128-sha1-modp1536!
16         esp=aes128-sha1-esn!
17         mobike=no
18
19 conn net-net 
20         left=PH_IP_SUN
21         leftcert=sunCert.pem
22         leftid=@sun.strongswan.org
23         leftsubnet=10.2.0.0/16
24         leftfirewall=yes
25         right=PH_IP_MOON
26         rightid=@moon.strongswan.org
27         rightsubnet=10.1.0.0/16
28         auto=add