Annotation of embedaddon/strongswan/testing/tests/tnc/tnccs-20-tls/hosts/moon/etc/swanctl/swanctl.conf, revision 1.1.1.1
1.1 misho 1: connections {
2:
3: rw-allow {
4: local_addrs = 192.168.0.1
5:
6: local {
7: auth = eap-ttls
8: id = moon.strongswan.org
9: }
10: remote {
11: auth = eap-ttls
12: groups = allow
13: }
14: children {
15: rw-allow {
16: local_ts = 10.1.0.0/28
17:
18: updown = /usr/local/libexec/ipsec/_updown iptables
19: esp_proposals = aes128gcm16-modp3072
20: }
21: }
22: version = 2
23: send_certreq = no
24: proposals = aes128-sha256-modp3072
25: }
26:
27: rw-isolate {
28: local_addrs = 192.168.0.1
29:
30: local {
31: auth = eap-ttls
32: id = moon.strongswan.org
33: }
34: remote {
35: auth = eap-ttls
36: groups = isolate
37: }
38: children {
39: rw-isolate {
40: local_ts = 10.1.0.16/28
41:
42: updown = /usr/local/libexec/ipsec/_updown iptables
43: esp_proposals = aes128gcm16-modp3072
44: }
45: }
46: version = 2
47: send_certreq = no
48: proposals = aes128-sha256-modp3072
49: }
50: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>