ipsec.conf 510 B

1234567891011121314151617181920212223242526
  1. # /etc/ipsec.conf - strongSwan IPsec configuration file
  2. config setup
  3. ca strongswan
  4. cacert=strongswanCert.pem
  5. certuribase=http://ip6-winnetou.strongswan.org/certs/
  6. crluri=http://ip6-winnetou.strongswan.org/strongswan.crl
  7. auto=add
  8. conn %default
  9. ikelifetime=60m
  10. keylife=20m
  11. rekeymargin=3m
  12. keyingtries=1
  13. conn home
  14. left=PH_IP6_DAVE
  15. leftcert=daveCert.pem
  16. leftid=dave@strongswan.org
  17. leftfirewall=yes
  18. right=PH_IP6_MOON
  19. rightid=@moon.strongswan.org
  20. rightsubnet=fec1::/16
  21. keyexchange=ikev2
  22. auto=add