| # /etc/ipsec.conf - strongSwan IPsec configuration file | |
| config setup | |
| conn %default | |
| ikelifetime=60m | |
| keylife=20m | |
| rekeymargin=3m | |
| keyingtries=1 | |
| keyexchange=ikev2 | |
| ike=aes256gcm128-aesxcbc-modp2048! | |
| esp=aes256gcm128-modp2048! | |
| conn home | |
| left=PH_IP_CAROL | |
| leftfirewall=yes | |
| leftcert=carolCert.pem | |
| leftid=carol@strongswan.org | |
| right=PH_IP_MOON | |
| rightsubnet=10.1.0.0/16 | |
| rightid=@moon.strongswan.org | |
| auto=add |