upgraded ikev1 scenarios to 5.0.0

2012-05-23 14:45:15 +02:00
parent 3c475660c5
commit 148b643880
973 changed files with 1476 additions and 13035 deletions
@@ -1,10 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
-	plutodebug=control
-	crlcheckinterval=180
-	strictcrlpolicy=no
-	charonstart=no
+	plutostart=no

 conn %default
 	ikelifetime=60m
@@ -12,19 +9,14 @@ conn %default
 	rekeymargin=3m
 	keyingtries=1
 	keyexchange=ikev1
-        dpdaction=restart
-        dpddelay=5
-        dpdtimeout=25
-
-conn carol
-	left=%defaultroute
-	leftnexthop=%direct
-	leftsubnet=10.1.0.0/16
-	leftsourceip=PH_IP_MOON1
+	dpdaction=clear
+	dpddelay=10
+	dpdtimeout=45
+conn rw
+	left=PH_IP_MOON
 	leftcert=moonCert.pem
 	[email protected]
-	leftfirewall=yes
-	right=%carol.strongswan.org
+	leftsubnet=10.1.0.0/16
+	right=%any
 	[email protected]
-	rightsubnet=PH_IP_CAROL1/32
-	auto=start
+	auto=add
@@ -0,0 +1,5 @@
+# /etc/strongswan.conf - strongSwan configuration file
+
+charon {
+  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default
+}