| 1234567891011121314151617181920212223 | 
							- # /etc/ipsec.conf - strongSwan IPsec configuration file
 
- config setup
 
- conn %default
 
- 	ikelifetime=60m
 
- 	keylife=20m
 
- 	rekeymargin=3m
 
- 	keyingtries=1
 
- 	keyexchange=ikev2
 
- conn home
 
- 	left=%any
 
- 	leftsourceip=%config
 
- 	leftid=carol.strongswan.org
 
- 	leftsigkey="dns:0sAwEAAdBdWU+BF7x4lyo+xHnr4UAOU89yQQuT5vdPoXzx6kRPsjYAuuktgXR+SaLkQHw/YRgDPSKj5nzmmlOQf/rWRr+8O2q+C92aUICmkNvZGamo5w2WlOMZ6T5dk2Hv+QM6xT/GzWyVr1dMYu/7tywD1Bw7aW/HqkRESDu6q95VWu+Lzg6XlxCNEez0YsZrN/fC6BL2qzKAqMBbIHFW8OOnh+nEY4IF5AzkZnFrw12GI72Z882pw97lyKwZhSz/GMQFBJx+rnNdw5P1IJwTlG5PUdoDCte/Mcr1iiA+zOovx55x1GoGxduoXWU5egrf1MtalRf9Pc8Xr4q3WEKTAmsZrVE="
 
- 	leftauth=pubkey
 
- 	leftfirewall=yes
 
- 	right=moon.strongswan.org
 
- 	rightid=moon.strongswan.org
 
- 	rightsubnet=10.1.0.0/16
 
- 	rightauth=pubkey
 
- 	auto=add
 
 
  |