Skip to content

Instantly share code, notes, and snippets.

@cjac
Last active August 29, 2015 14:27
Show Gist options
  • Save cjac/99d2a8fa6a8955fe88a5 to your computer and use it in GitHub Desktop.
Save cjac/99d2a8fa6a8955fe88a5 to your computer and use it in GitHub Desktop.
# ipsec.conf - strongSwan IPsec configuration file
# basic configuration
config setup
# strictcrlpolicy=yes
# uniqueids = no
# Add connections here.
# Sample VPN connections
conn %default
ikelifetime=60m
lifetime=30m
rekeymargin=3m
keyingtries=%forever
mobike=no
keyexchange=ikev2
auto=start
authby=secret
type=tunnel
ike=aes128-md5-modp1024
esp=aes128-md5-modp1024
dpdaction=restart
#
# sip0
#
conn sip0
leftid=@debian0.swna.disney.com
left=%any
leftsourceip=%config4
rightid=@sip0.colliertech.org
right=208.115.126.78
rightsubnet=100.64.108.1/32
keyexchange=ikev2
authby=secret
type=tunnel
ike=aes128-md5-modp1024
esp=aes128-md5-modp1024
dpdaction=restart
ikelifetime=7d
lifetime=1d
rekeymargin=2h
keyingtries=1
auto=start
include /var/lib/strongswan/ipsec.conf.inc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment