26 lines
560 B
Plaintext
26 lines
560 B
Plaintext
config setup
|
|
# needed when using PSK only. Not needed for X.509 based servers
|
|
uniqueids=no
|
|
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v4:100.64.0.0/10,%v4:!100.64.0.0/24
|
|
|
|
conn ikev1
|
|
authby=secret
|
|
pfs=no
|
|
auto=add
|
|
rekey=no
|
|
left=%defaultroute
|
|
right=%any
|
|
ikev2=never
|
|
type=transport
|
|
leftprotoport=17/1701
|
|
rightprotoport=17/%any
|
|
dpddelay=15
|
|
dpdtimeout=30
|
|
dpdaction=clear
|
|
|
|
conn ikev1-nat
|
|
also=ikev1
|
|
rightsubnet=vhost:%priv
|
|
|
|
# include /etc/ipsec.d/*.conf
|