strongswan.conf 899 B

1234567891011121314151617181920212223242526272829303132333435363738394041424344
  1. # /etc/strongswan.conf - strongSwan configuration file
  2. charon-systemd {
  3. load = random nonce aes sha1 sha2 md5 pem pkcs1 gmp hmac x509 revocation curl vici socket-default kernel-netlink eap-identity eap-ttls eap-md5 eap-tnc tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite
  4. syslog {
  5. daemon {
  6. tnc = 2
  7. imv = 3
  8. }
  9. }
  10. plugins {
  11. eap-ttls {
  12. phase2_method = md5
  13. phase2_piggyback = yes
  14. phase2_tnc = yes
  15. max_message_count = 0
  16. }
  17. eap-tnc {
  18. max_message_count = 0
  19. }
  20. tnc-pdp {
  21. server = aaa.strongswan.org
  22. radius {
  23. secret = gv6URkSs
  24. }
  25. }
  26. }
  27. }
  28. libimcv {
  29. debug_level = 3
  30. database = sqlite:///etc/db.d/config.db
  31. policy_script = /usr/local/libexec/ipsec/imv_policy_manager
  32. plugins {
  33. imv-swima {
  34. rest_api
  35. {
  36. uri = http://admin-user:strongSwan@tnc.strongswan.org/api/
  37. }
  38. }
  39. }
  40. }