testing/tests/swanctl/rw-psk-ipv4/hosts/carol/etc/swanctl/swanctl.conf

   1 connections {
   2
   3    home {
   4       local_addrs  = 192.168.0.100
   5       remote_addrs = 192.168.0.1
   6
   7       local {
   8          auth = psk
   9          id = 192.168.0.100
  10       }
  11       remote {
  12          auth = psk
  13          id = 192.168.0.1
  14       }
  15       children {
  16          home {
  17             remote_ts = 10.1.0.0/16
  18
  19             start_action = none
  20             updown = /usr/local/libexec/ipsec/_updown iptables
  21             rekey_time = 10m
  22             esp_proposals = aes128gcm128-modp2048
  23          }
  24       }
  25
  26       version = 2
  27       reauth_time = 60m
  28       rekey_time =  20m
  29       proposals = aes128-sha256-modp2048
  30    }
  31 }
  32
  33 secrets {
  34
  35    ike-moon {
  36       id = 192.168.0.1
  37       secret = 0sFpZAZqEN6Ti9sqt4ZP5EWcqx
  38    }
  39 }
  40