upgraded tnc scenarios to 5.0.0
[strongswan.git] / testing / tests / tnc / tnccs-11-radius / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         plutostart=no
5
6 conn %default
7         ikelifetime=60m
8         keylife=20m
9         rekeymargin=3m
10         keyingtries=1
11         keyexchange=ikev2
12
13 conn rw-allow
14         rightgroups=allow
15         leftsubnet=10.1.0.0/28
16         also=rw-eap
17         auto=add
18
19 conn rw-isolate
20         rightgroups=isolate
21         leftsubnet=10.1.0.16/28
22         also=rw-eap
23         auto=add
24
25 conn rw-eap
26         left=PH_IP_MOON
27         leftcert=moonCert.pem
28         leftid=@moon.strongswan.org
29         leftauth=pubkey
30         leftfirewall=yes
31         rightauth=eap-radius
32         rightid=*@strongswan.org
33         rightsendcert=never
34         right=%any