| Filip Tehlar | d5a3380 | 2021-02-20 02:26:17 +0000 | [diff] [blame] | 1 | config setup |
| 2 | strictcrlpolicy=no | ||||
| 3 | |||||
| 4 | conn initiator | ||||
| 5 | mobike=no | ||||
| 6 | auto=add | ||||
| 7 | type=tunnel | ||||
| 8 | keyexchange=ikev2 | ||||
| 9 | ike=aes256gcm16-prfsha256-modp2048! | ||||
| 10 | esp=aes256gcm16-esn! | ||||
| 11 | |||||
| 12 | # local: | ||||
| 13 | leftauth=psk | ||||
| 14 | leftid=@sswan.vpn.example.com | ||||
| 15 | leftsubnet=192.168.5.0/24 | ||||
| 16 | |||||
| 17 | # remote: (gateway) | ||||
| 18 | rightid=@roadwarrior.vpp | ||||
| 19 | right=192.168.10.2 | ||||
| 20 | rightauth=psk | ||||
| 21 | rightsubnet=192.168.3.0/24 | ||||
| 22 | |||||