# /etc/ipsec.conf - strongSwan IPsec configuration file

config setup
        strictcrlpolicy=no
       # plutostart=no

conn %default
        ikelifetime=60m
        keylife=20m
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev2

conn home
        left=1.1.1.1
        leftid=01234567@ims.mnc212.mcc091.3gppnetwork.org
        #leftid=sun@strongswan.org
        leftauth=eap
        leftfirewall=yes
        right=1.1.1.2
        #right=192.168.0.1
        #rightid=@moon.strongswan.org
        rightsendcert=never
        rightauth=psk
        aaa_identity="C=in, O=gg, CN=kl"
        #leftcert=strswancert.pem
        auto=add

