ipsec.conf_sip0

# ipsec.conf - strongSwan IPsec configuration file

config setup
	strictcrlpolicy=no
	charondebug=0

conn %default
     ikelifetime=60m
     lifetime=30m
     rekeymargin=3m
     keyingtries=%forever
     mobike=no
     keyexchange=ikev2
     auto=start
     authby=secret
     type=tunnel
     ike=aes128-md5-modp1024
     esp=aes128-md5-modp1024
     dpdaction=restart

#
# debian0
#

conn debian0
     rightid=@debian0.swna.disney.com
     right=%any
     rightsourceip=100.64.108.2
     leftid=@sip0.colliertech.org
     left=208.115.126.78
     leftsourceip=100.64.108.1
     leftsubnet=100.64.108.1/32
     ikelifetime=7d
     lifetime=1d
     rekeymargin=2h
     keyingtries=%forever
     auto=add

#include /var/lib/strongswan/ipsec.conf.inc