testing: Migrated ikev2 scenarios to swanctl
[strongswan.git] / testing / tests / swanctl / host2host-cert / hosts / sun / etc / swanctl / swanctl.conf
1 connections {
2
3    host-host {
4       local_addrs  = 192.168.0.2
5       remote_addrs = 192.168.0.1
6
7       local {
8          auth = pubkey
9          certs = sunCert.pem
10          id = sun.strongswan.org
11       }
12       remote {
13          auth = pubkey
14          id = moon.strongswan.org
15       }
16       children {
17          host-host {
18             updown = /usr/local/libexec/ipsec/_updown iptables
19             rekey_time = 5400
20             rekey_bytes = 500000000
21             rekey_packets = 1000000
22             esp_proposals = aes128gcm128-x25519
23          }
24       }
25       version = 2
26       mobike = no
27       reauth_time = 10800
28       proposals = aes128-sha256-x25519
29    }
30 }