code.ossystems Code Review - meta-freescale.git/blob

   1 # /etc/ipsec.conf - strongSwan IPsec configuration file
   2
   3 config setup
   4         charondebug="chd 2, knl 2"
   5         crlcheckinterval=180
   6         strictcrlpolicy=no
   7         plutostart=no
   8
   9 conn %default
  10         ikelifetime=60m
  11         keylife=20m
  12         rekeymargin=3m
  13         keyingtries=1
  14         keyexchange=ikev2
  15         auth=esp
  16         compress=no
  17         mobike=no
  18
  19 conn net-net
  20         left=200.200.200.20
  21         leftcert=sunCert.pem
  22         leftid="C=CH, O=Linux strongSwan, CN=sun.strongswan.org"
  23         leftsubnet=192.168.2.0/24
  24         leftfirewall=yes
  25         right=200.200.200.10
  26         rightid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org"
  27         rightsubnet=192.168.1.0/24
  28         auto=add