# /etc/ipsec.conf - strongSwan IPsec configuration file


config setup
	#charondebug="dmn 2,mgr 2,ike 2,chd 2,cfg 2,knl 2,net 2,enc 2,lib 2"
	plutodebug=all
	crlcheckinterval=180
	nat_traversal=no
	plutostart=yes
	charonstart=no

conn conn-host-host
	keyexchange=ikev1
	ikelifetime=10m
	lifetime=60m
	margintime=12m
	dpdaction=clear
	dpddelay=5
	dpdtimeout=20
	pfs=no
	type=transport
	left=10.1.161.165
	right=10.1.161.188
	auto=add
	authby=psk

