added the ikev2/any-interface scenario

2008-07-11 17:08:25 +00:00
parent 174960bedc
commit a771dc33d0
13 changed files with 184 additions and 0 deletions
@@ -0,0 +1,30 @@
+# /etc/ipsec.conf - strongSwan IPsec configuration file
+
+config setup
+        crlcheckinterval=180
+	strictcrlpolicy=no
+	plutostart=no
+
+conn %default
+	ikelifetime=60m
+	keylife=20m
+	rekeymargin=3m
+	keyingtries=1
+	keyexchange=ikev2
+	mobike=no
+	type=transport
+	compress=yes
+	dpdaction=hold
+	dpddelay=10
+	left=%any
+	leftcert=moonCert.pem
+
+conn alice
+	right=PH_IP_ALICE
+	rightid="C=CH, O=Linux strongSwan, OU=Sales, [email protected]"
+	auto=route
+
+conn sun 
+	right=PH_IP_SUN
+	rightid="C=CH, O=Linux strongSwan, CN=sun.strongswan.org"
+	auto=route
@@ -0,0 +1,5 @@
+# /etc/strongswan.conf - strongSwan configuration file
+
+charon {
+  load = curl aes des sha1 sha2 md5 gmp random x509 pubkey hmac xcbc stroke
+}