| 123456789101112131415161718192021 | # /etc/ipsec.conf - strongSwan IPsec configuration fileconfig setup	strictcrlpolicy=yesconn %default	ikelifetime=60m	keylife=20m	rekeymargin=3m	keyingtries=1	keyexchange=ikev2conn home	left=PH_IP_CAROL	leftcert=carolCert.pem	leftid=carol@strongswan.org	right=PH_IP_MOON	rightsubnet=10.1.0.0/16	rightid=@moon.strongswan.org	rightca="C=CH, O=strongSwan Project, CN=strongSwan Root CA"	auto=add
 |