Annotation of embedaddon/strongswan/testing/tests/tnc/tnccs-20-pdp-eap/hosts/moon/etc/swanctl/swanctl.conf, revision 1.1
1.1 ! misho 1: connections {
! 2:
! 3: rw-allow {
! 4: local_addrs = 192.168.0.1
! 5:
! 6: local {
! 7: auth = pubkey
! 8: id = moon.strongswan.org
! 9: certs = moonCert.pem
! 10: }
! 11: remote {
! 12: auth = eap-radius
! 13: eap_id = %any
! 14: groups = allow
! 15: }
! 16: children {
! 17: rw-allow {
! 18: local_ts = 10.1.0.0/28
! 19:
! 20: updown = /usr/local/libexec/ipsec/_updown iptables
! 21: esp_proposals = aes128gcm16-modp3072
! 22: }
! 23: }
! 24: version = 2
! 25: send_certreq = no
! 26: proposals = aes128-sha256-modp3072
! 27: }
! 28:
! 29: rw-isolate {
! 30: local_addrs = 192.168.0.1
! 31:
! 32: local {
! 33: auth = pubkey
! 34: id = moon.strongswan.org
! 35: }
! 36: remote {
! 37: auth = eap-radius
! 38: eap_id = %any
! 39: groups = isolate
! 40: }
! 41: children {
! 42: rw-isolate {
! 43: local_ts = 10.1.0.16/28
! 44:
! 45: updown = /usr/local/libexec/ipsec/_updown iptables
! 46: esp_proposals = aes128gcm16-modp3072
! 47: }
! 48: }
! 49: version = 2
! 50: send_certreq = no
! 51: proposals = aes128-sha256-modp3072
! 52: }
! 53: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>