43 lines
1007 B
Plaintext
43 lines
1007 B
Plaintext
# ipsec.conf - strongSwan IPsec configuration file
|
|
|
|
# Manual: man 5 ipsec.conf
|
|
# Help: http://www.strongswan.org/docs/readme.htm
|
|
|
|
version 2.0 # conforms to second version of ipsec.conf specification
|
|
|
|
# basic configuration
|
|
|
|
config setup
|
|
# Debug-logging controls: "none" for (almost) none, "all" for lots.
|
|
# plutodebug=all
|
|
# crlcheckinterval=600
|
|
# strictcrlpolicy=yes
|
|
# cachecrls=yes
|
|
# nat_traversal=yes
|
|
# charonstart=no
|
|
# plutostart=no
|
|
|
|
# Add connections here.
|
|
|
|
# Sample VPN connections
|
|
|
|
#conn sample-self-signed
|
|
# left=%defaultroute
|
|
# leftsubnet=10.1.0.0/16
|
|
# leftcert=selfCert.der
|
|
# leftsendcert=never
|
|
# right=192.168.0.2
|
|
# rightsubnet=10.2.0.0/16
|
|
# rightcert=peerCert.der
|
|
# auto=start
|
|
|
|
#conn sample-with-ca-cert
|
|
# left=%defaultroute
|
|
# leftsubnet=10.1.0.0/16
|
|
# leftcert=myCert.pem
|
|
# right=192.168.0.2
|
|
# rightsubnet=10.2.0.0/16
|
|
# rightid="C=CH, O=Linux strongSwan CN=peer name"
|
|
# keyexchange=ikev2
|
|
# auto=start
|