testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/swanctl/swanctl.conf

   1 connections {
   2
   3    net-net {
   4       local_addrs  = fec0::1
   5       remote_addrs = fec0::2
   6
   7       local {
   8          auth = pubkey
   9          certs = moonCert.pem
  10          id = moon.strongswan.org
  11       }
  12       remote {
  13          auth = pubkey
  14          id = sun.strongswan.org
  15       }
  16       children {
  17          net-net {
  18             local_ts  = fec1::0/16
  19             remote_ts = fec2::0/16
  20
  21             updown = /usr/local/libexec/ipsec/_updown iptables
  22             esp_proposals = aes128-sha256-x25519
  23          }
  24       }
  25       version = 2
  26       mobike = no
  27       proposals = aes128-sha256-x25519
  28    }
  29 }
  30
  31 authorities {
  32    strongswan {
  33       cacert = strongswanCert.pem
  34       crl_uris = http://ip6-winnetou.strongswan.org/strongswan.crl
  35    }
  36 }