ipsec.conf 362 B

123456789101112131415161718192021
  1. # /etc/ipsec.conf - strongSwan IPsec configuration file
  2. conn %default
  3. ikelifetime=60m
  4. keylife=20m
  5. rekeymargin=3m
  6. keyingtries=1
  7. # to access the host via SSH in the test environment
  8. conn pass-ssh
  9. authby=never
  10. leftsubnet=0.0.0.0/0[tcp/22]
  11. rightsubnet=0.0.0.0/0[tcp]
  12. type=pass
  13. auto=route
  14. conn trap-any
  15. right=%any
  16. type=transport
  17. authby=psk
  18. auto=route