| 123456789101112131415161718192021 | 
							- # /etc/ipsec.conf - strongSwan IPsec configuration file
 
- conn %default
 
- 	ikelifetime=60m
 
- 	lifetime=10s
 
- 	margintime=5s
 
- 	rekeyfuzz=0%
 
- 	keyingtries=1
 
- 	keyexchange=ikev2
 
- 	mobike=no
 
- conn net-net
 
- 	left=PH_IP_MOON
 
- 	leftcert=moonCert.pem
 
- 	leftid=@moon.strongswan.org
 
- 	leftsubnet=10.1.0.0/16
 
- 	leftfirewall=yes
 
- 	right=PH_IP_SUN
 
- 	rightid=@sun.strongswan.org
 
- 	rightsubnet=10.2.0.0/16
 
- 	auto=add
 
 
  |