testing/tests/tnc/tnccs-11-supplicant/hosts/moon/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4
   5 conn %default
   6         ikelifetime=60m
   7         keylife=20m
   8         rekeymargin=3m
   9         keyingtries=1
  10         keyexchange=ikev2
  11
  12 conn rw-allow
  13         rightgroups=allow
  14         leftsubnet=10.1.0.0/28
  15         also=rw-eap
  16         auto=add
  17
  18 conn rw-isolate
  19         rightgroups=isolate
  20         leftsubnet=10.1.0.16/28
  21         also=rw-eap
  22         auto=add
  23
  24 conn rw-eap
  25         left=PH_IP_MOON
  26         leftcert=moonCert.pem
  27         leftid=@moon.strongswan.org
  28         leftauth=pubkey
  29         leftfirewall=yes
  30         rightauth=eap-radius
  31         rightid=*@strongswan.org
  32         rightsendcert=never
  33         right=%any