]> code.ossystems Code Review - meta-freescale.git/blob
d9d6c0c61fa60865a7ce9a227e1bc2d4560ede60
[meta-freescale.git] /
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         charondebug="chd 2, knl 2"
5         crlcheckinterval=180
6         strictcrlpolicy=no
7         plutostart=no
8
9 conn %default
10         ikelifetime=60m
11         keylife=20m
12         rekeymargin=3m
13         keyingtries=1
14         keyexchange=ikev2
15         type=tunnel
16         auth=esp
17         compress=no
18         mobike=no
19
20 conn net-net
21         left=200.200.200.10
22         leftsubnet=192.168.1.0/24
23         leftcert=moonCert.pem
24         leftid="C=CH, O=Linux strongSwan, CN=moon.strongswan.org"
25         leftfirewall=yes
26         right=200.200.200.20
27         rightsubnet=192.168.2.0/24
28         rightid="C=CH, O=Linux strongSwan, CN=sun.strongswan.org"
29         auto=add