Files
strongswan-ext/testing/tests/ikev2/rw-dnssec/hosts/moon/etc/ipsec.conf
T
Tobias Brunner 1e059c837b testing: Rename public keys in DNSSEC scenarios
We will generate PEM-encoded public keys with the script.
2019-05-08 14:56:48 +02:00

23 lines
369 B
Plaintext

# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
conn rw
left=PH_IP_MOON
leftsubnet=10.1.0.0/16
leftid=moon.strongswan.org
leftauth=pubkey
leftsigkey=moonPub.pem
leftfirewall=yes
right=%any
rightauth=pubkey
rightsourceip=10.3.0.0/24
auto=add