testing/tests/tnc/tnccs-11/hosts/moon/etc/ipsec.conf

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         plutostart=no
   5         charondebug="tnc 3, imv 3"
   6
   7 conn %default
   8         ikelifetime=60m
   9         keylife=20m
  10         rekeymargin=3m
  11         keyingtries=1
  12         keyexchange=ikev2
  13
  14 conn rw-allow
  15         rightgroups=allow
  16         leftsubnet=10.1.0.0/28
  17         also=rw-eap
  18         auto=add
  19
  20 conn rw-isolate
  21         rightgroups=isolate
  22         leftsubnet=10.1.0.16/28
  23         also=rw-eap
  24         auto=add
  25
  26 conn rw-eap
  27         left=PH_IP_MOON
  28         leftcert=moonCert.pem
  29         leftid=@moon.strongswan.org
  30         leftauth=eap-ttls
  31         leftfirewall=yes
  32         rightauth=eap-ttls
  33         rightid=*@strongswan.org
  34         rightsendcert=never
  35         right=%any