disable INITIAL_CONTACT message by setting unigueids=no
[strongswan.git] / testing / tests / ikev2 / two-certs / hosts / carol / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         crlcheckinterval=180
5         uniqueids=no
6         strictcrlpolicy=yes
7         plutostart=no
8
9 conn %default
10         ikelifetime=60m
11         keylife=20m
12         rekeymargin=3m
13         keyingtries=1
14         keyexchange=ikev2
15         left=PH_IP_CAROL
16         leftid=carol@strongswan.org
17         leftfirewall=yes
18         right=PH_IP_MOON
19         rightid=@moon.strongswan.org
20
21 conn alice 
22         leftcert=carolCert.pem
23         rightsubnet=10.1.0.10/32
24         auto=add
25
26 conn venus
27         leftcert=carolCert-002.pem
28         rightsubnet=10.1.0.20/32
29         auto=add
30