testing: Converted libipsec/net2net-cert-ipv6 to swanctl

2017-11-10 11:49:39 +01:00
parent c3b8778fc9
commit 86d1b7a14d
10 changed files with 102 additions and 59 deletions
@@ -0,0 +1,29 @@
+connections {
+
+   gw-gw {
+      local_addrs  = 192.168.0.1
+      remote_addrs = 192.168.0.2 
+
+      local {
+         auth = pubkey
+         certs = moonCert.pem
+         id = moon.strongswan.org
+      }
+      remote {
+         auth = pubkey
+         id = sun.strongswan.org 
+      }
+      children {
+         net-net {
+            local_ts  = fec1::0/16[ipv6-icmp] 
+            remote_ts = fec2::0/16[ipv6-icmp] 
+
+            updown = /etc/updown
+            esp_proposals = aes256gcm128-ecp384
+         }
+      }
+      version = 2
+      mobike = no
+      proposals = aes256-sha384-ecp384
+   }
+}