upgraded tnc scenarios to 5.0.0
[strongswan.git] / testing / tests / tnc / tnccs-20-tls / hosts / moon / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         plutostart=no
5         charondebug="tnc 2, imv 2"
6
7 conn %default
8         ikelifetime=60m
9         keylife=20m
10         rekeymargin=3m
11         keyingtries=1
12         keyexchange=ikev2
13
14 conn rw-allow
15         rightgroups=allow
16         leftsubnet=10.1.0.0/28
17         also=rw-eap
18         auto=add
19
20 conn rw-isolate
21         rightgroups=isolate
22         leftsubnet=10.1.0.16/28
23         also=rw-eap
24         auto=add
25
26 conn rw-eap
27         left=PH_IP_MOON
28         leftcert=moonCert.pem
29         leftid=@moon.strongswan.org
30         leftauth=eap-ttls
31         leftfirewall=yes
32         rightauth=eap-ttls
33         rightid=*@strongswan.org
34         rightsendcert=never
35         right=%any