testing/tests/tnc/tnccs-11-radius/hosts/moon/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         plutostart=no
   5
   6 conn %default
   7         ikelifetime=60m
   8         keylife=20m
   9         rekeymargin=3m
  10         keyingtries=1
  11         keyexchange=ikev2
  12
  13 conn rw-allow
  14         rightgroups=allow
  15         leftsubnet=10.1.0.0/28
  16         also=rw-eap
  17         auto=add
  18
  19 conn rw-isolate
  20         rightgroups=isolate
  21         leftsubnet=10.1.0.16/28
  22         also=rw-eap
  23         auto=add
  24
  25 conn rw-eap
  26         left=PH_IP_MOON
  27         leftcert=moonCert.pem
  28         leftid=@moon.strongswan.org
  29         leftauth=pubkey
  30         leftfirewall=yes
  31         rightauth=eap-radius
  32         rightid=*@strongswan.org
  33         rightsendcert=never
  34         right=%any