208477deb4ceb7957c90dc73633362210c1eeb21
[strongswan.git] / testing / tests / pfkey / alg-aes-xcbc / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         crlcheckinterval=180
5         strictcrlpolicy=yes
6         plutostart=no
7
8 conn %default
9         ikelifetime=60m
10         keylife=20m
11         rekeymargin=3m
12         keyingtries=1
13         keyexchange=ikev2
14         ike=aes128-aesxcbc-modp2048!
15         esp=aes128-aesxcbc-modp2048!
16
17 conn rw
18         left=PH_IP_MOON
19         leftfirewall=yes
20         leftcert=moonCert.pem
21         leftid=@moon.strongswan.org
22         leftsubnet=10.1.0.0/16
23         right=%any
24         auto=add