2010-10-07 07:31:44 +02:00

26 lines
438 B
Plaintext
Executable File

# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
plutodebug=control
crlcheckinterval=180
strictcrlpolicy=no
nat_traversal=yes
charonstart=no
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev1
conn nat-t
left=%defaultroute
leftsubnet=10.2.0.0/16
leftcert=bobCert.pem
leftid=bob@strongswan.org
leftfirewall=yes
right=%any
rightsubnetwithin=10.1.0.0/16
auto=add