openswan/testing/pluto/ikev2-algo-01-modp2048-initiator/east.conf

   1 # /etc/ipsec.conf - Openswan IPsec configuration file
   2
   3 version 2.0
   4
   5 config setup
   6         # put the logs in /tmp for the UMLs, so that we can operate
   7         # without syslogd, which seems to break on UMLs
   8         plutostderrlog=/tmp/pluto.log
   9         plutodebug="all"
  10         plutorestartoncrash=false
  11         dumpdir=/tmp
  12
  13 conn westnet--eastnet-ikev2
  14         also=west-east-base
  15         also=westnet
  16         also=eastnet
  17         ikev2=insist
  18         authby=secret
  19         #auto=start
  20         #only on west is ike= set
  21         #ike=aes128-sha1-modp2048
  22
  23 include /etc/ipsec.d/ipsec.conf.common
  24
  25 conn us
  26         rightsubnet=192.0.2.0/24
  27
  28 conn them
  29         leftsubnet=192.0.1.0/24
  30