adapted pfkey alg and esp scenarios
[strongswan.git] / testing / tests / pfkey / alg-aes-xcbc / hosts / carol / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         crlcheckinterval=180
5         strictcrlpolicy=yes
6         plutostart=no
7
8 conn %default
9         ikelifetime=60m
10         keylife=20m
11         rekeymargin=3m
12         keyingtries=1
13         keyexchange=ikev2
14         ike=aes128-aesxcbc-modp2048!
15         esp=aes128-aesxcbc-modp2048!
16
17 conn home
18         left=PH_IP_CAROL
19         leftfirewall=yes
20         leftcert=carolCert.pem
21         leftid=carol@strongswan.org
22         right=PH_IP_MOON
23         rightsubnet=10.1.0.0/16
24         rightid=@moon.strongswan.org
25         auto=add