Skip to content

Instantly share code, notes, and snippets.

@yiquncode
Last active August 29, 2015 14:04
Show Gist options
  • Save yiquncode/e11b793ee36424504696 to your computer and use it in GitHub Desktop.
Save yiquncode/e11b793ee36424504696 to your computer and use it in GitHub Desktop.
config setup
uniqueids=never
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
rekey=no
keyingtries=1
keyexchange=ike
leftsubnet=0.0.0.0/0
right=%any
rightsourceip=192.168.99.128/25
dpdaction=clear
dpddelay=300s
dpdtimeout=1h
conn IPSec-IKEv2
keyexchange=ikev2
auto=add
leftauth=pubkey
leftcert=serverCert.pem
rightauth=eap-radius
rightsendcert=never
eap_identity=%identity
compress=yes
conn CiscoIPSec
keyexchange=ikev1
auto=add
aggressive=yes
compress=yes
ike=aes256-sha1-modp1024!
esp=aes256-sha1!
dpdaction=clear
leftid=blackberry
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment