Created ikev2/rw-ntru-bliss scenario
[strongswan.git] / testing / tests / ikev2 / rw-ntru-bliss / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4
5 conn %default
6         ikelifetime=60m
7         keylife=20m
8         rekeymargin=3m
9         keyingtries=1
10         keyexchange=ikev2
11         ike=aes128-sha256-ntru128,aes192-sha384-ntru192!
12         esp=aes128-sha256,aes192-sha384!
13         authby=pubkey
14         fragmentation=yes
15
16 conn rw
17         left=PH_IP_MOON
18         leftsubnet=10.1.0.0/16
19         leftcert=moonCert.der
20         leftid=moon.strongswan.org
21         leftfirewall=yes
22         right=%any
23         rightsourceip=10.3.0.0/28
24         auto=add