ipsec.conf 471 B

12345678910111213141516171819202122232425
  1. # /etc/ipsec.conf - strongSwan IPsec configuration file
  2. config setup
  3. ca strongswan
  4. cacert=strongswanCert.pem
  5. certuribase=http://ip6-winnetou.strongswan.org/certs/
  6. crluri=http://ip6-winnetou.strongswan.org/strongswan.crl
  7. auto=add
  8. conn %default
  9. ikelifetime=60m
  10. keylife=20m
  11. rekeymargin=3m
  12. keyingtries=1
  13. conn rw
  14. left=PH_IP6_MOON
  15. leftcert=moonCert.pem
  16. leftid=@moon.strongswan.org
  17. leftsubnet=fec1::/16
  18. leftfirewall=yes
  19. right=%any
  20. keyexchange=ikev2
  21. auto=add