1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26
|
# /etc/ipsec.conf - Libreswan IPsec configuration file
config setup
ikev1-policy=accept
# put the logs in /tmp for the UMLs, so that we can operate
# without syslogd, which seems to break on UMLs
logfile=/tmp/pluto.log
logtime=no
logappend=no
dumpdir=/tmp
plutodebug=all
conn %default
keyexchange=ikev1
conn westnet-eastnet-ipv4-psk
left=192.1.2.45
leftnexthop=192.1.2.23
right=192.1.2.23
rightnexthop=192.1.2.45
leftsubnet=192.0.1.0/24
rightsubnet=192.0.2.0/24
leftid=@west
rightid=@east
authby=secret
|