Merge branch 'curl-features'
[strongswan.git] / testing / tests / tnc / tnccs-11-supplicant / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4
5 conn %default
6         ikelifetime=60m
7         keylife=20m
8         rekeymargin=3m
9         keyingtries=1
10         keyexchange=ikev2
11
12 conn rw-allow
13         rightgroups=allow
14         leftsubnet=10.1.0.0/28
15         also=rw-eap
16         auto=add
17
18 conn rw-isolate
19         rightgroups=isolate
20         leftsubnet=10.1.0.16/28
21         also=rw-eap
22         auto=add
23
24 conn rw-eap
25         left=PH_IP_MOON
26         leftcert=moonCert.pem
27         leftid=@moon.strongswan.org
28         leftauth=pubkey
29         leftfirewall=yes
30         rightauth=eap-radius
31         rightid=*@strongswan.org
32         rightsendcert=never
33         right=%any