| 123456789101112131415161718192021 | 
							- # /etc/ipsec.conf - strongSwan IPsec configuration file
 
- config setup
 
- conn %default
 
- 	ikelifetime=60m
 
- 	keylife=20m
 
- 	rekeymargin=3m
 
- 	keyingtries=1
 
- 	keyexchange=ikev1
 
- conn alice
 
- 	left=PH_IP_CAROL
 
- 	leftcert=carolCert.pem
 
- 	leftid=carol@strongswan.org
 
- 	leftsendcert=ifasked
 
- 	right=PH_IP_MOON
 
- 	rightid=@moon.strongswan.org
 
- 	rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"
 
- 	rightsubnet=PH_IP_ALICE/32
 
- 	auto=add
 
 
  |