ipsec.conf 383 B

1234567891011121314151617181920
  1. # /etc/ipsec.conf - strongSwan IPsec configuration file
  2. config setup
  3. strictcrlpolicy=yes
  4. conn %default
  5. ikelifetime=60m
  6. keylife=20m
  7. rekeymargin=3m
  8. keyingtries=1
  9. keyexchange=ikev2
  10. left=PH_IP_MOON
  11. leftcert=moonCert.pem
  12. leftid=@moon.strongswan.org
  13. conn alice
  14. leftsubnet=PH_IP_ALICE/32
  15. right=%any
  16. rightca="C=CH, O=strongSwan Project, OU=Research, CN=Research CA"
  17. auto=add