ipsec.conf 451 B

12345678910111213141516171819202122232425
  1. # /etc/ipsec.conf - strongSwan IPsec configuration file
  2. config setup
  3. ca strongswan
  4. cacert=strongswanCert.pem
  5. certuribase=http://winnetou.strongswan.org/certs/
  6. auto=add
  7. conn %default
  8. ikelifetime=60m
  9. keylife=20m
  10. rekeymargin=3m
  11. keyingtries=1
  12. conn home
  13. left=PH_IP_CAROL
  14. leftcert=carolCert.pem
  15. leftid=carol@strongswan.org
  16. leftfirewall=yes
  17. right=PH_IP_MOON
  18. rightid=@moon.strongswan.org
  19. rightsubnet=10.1.0.0/16
  20. keyexchange=ikev2
  21. auto=add