2012-06-18 22:30:26 +02:00

24 lines
376 B
Plaintext

# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
aggressive=yes
conn rw
left=PH_IP_MOON
leftcert=moonCert.pem
leftid=@moon.strongswan.org
leftsubnet=10.1.0.0/16
leftauth=pubkey
leftfirewall=yes
right=%any
rightauth=pubkey
rightauth2=xauth
auto=add