commit d5a3380c65a8ab9e317b8b51a92d50b70e2a9481
author Filip Tehlar <ftehlar@cisco.com> Sat Feb 20 02:26:17 2021 +0000
committer Beno�t Ganne <bganne@cisco.com> Thu Mar 04 14:57:54 2021 +0000
tree b300ea5fddc7aa59af5d97d50bdd9d6f65a925da
parent 619fc7e3e82b62acf28078853860c9f9803a9dc4

misc: add ikev2 tests usecases

Type: test
Ticket: VPP-1893

Change-Id: Ib6ffd00e73f7110bf9e702f4a0fd5c68395d6786
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>

extras/strongswan/configs/responder_keepalive/ipsec.conf

diff --git a/extras/strongswan/configs/responder_keepalive/ipsec.conf b/extras/strongswan/configs/responder_keepalive/ipsec.conf
new file mode 100644
index 0000000..7ca0d41
--- /dev/null
+++ b/extras/strongswan/configs/responder_keepalive/ipsec.conf
@@ -0,0 +1,23 @@
+config setup
+  strictcrlpolicy=no
+
+conn initiator
+  mobike=no
+  auto=add
+  type=tunnel
+  keyexchange=ikev2
+  ike=aes256gcm16-prfsha256-modp2048!
+  esp=aes256gcm16-esn!
+  lifetime=1h
+
+# local:
+  leftauth=psk
+  leftid=@roadwarrior.vpn.example.com
+  leftsubnet=192.168.5.0/24
+
+# remote: (gateway)
+  rightid=@vpp.home
+  right=192.168.10.2
+  rightauth=psk
+  rightsubnet=192.168.3.0/24
+