ipsec.conf 336 B

1234567891011121314151617
  1. # /etc/ipsec.conf - strongSwan IPsec configuration file
  2. conn %default
  3. keyexchange=ikev2
  4. ike=aes128-sha256-modp3072!
  5. ah=sha256!
  6. conn net-net
  7. left=PH_IP_SUN
  8. leftcert=sunCert.pem
  9. leftid=@sun.strongswan.org
  10. leftsubnet=10.2.0.0/16
  11. leftfirewall=yes
  12. right=PH_IP_MOON
  13. rightid=@moon.strongswan.org
  14. rightsubnet=10.1.0.0/16
  15. auto=add