![]() ![]() | ![]() |
Strongswan
# /etc/ipsec.conf - strongSwan IPsec configuration file config setup strictcrlpolicy=yes ca strongswan cacert=strongswanCert.pem ocspuri=http://ocsp.strongswan.org:8880 auto=add conn %default keyexchange=ikev2 ikelifetime=60m keylife=20m rekeymargin=3m keyingtries=1 conn home left=PH_IP_CAROL leftcert=carolCert.pem leftid=carol@strongswan.org right=PH_IP_MOON rightsubnet=10.1.0.0/16 rightid=@moon.strongswan.org auto=add