# ipsec.conf - strongSwan IPsec configuration file

config setup
        crlcheckinterval=180
        strictcrlpolicy=no
        plutostart=no
        charondebug= "dmn 4, mgr 4, ike 4, chd 4, job 4, cfg 4, knl 4, net 4, enc 4, lib 4"

conn %default
        auth=esp
        authby=psk
        ike=aes128-aes192-aes256-sha1-modp1536!
        ikelifetime=60m
        keylife=10m
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev2
        mobike=no
        forceencaps=yes

conn conn2client10-193-160-221-80
        esp=aes128-sha1!
        right=10.193.160.221
        rightid=@client
        rightsubnet=10.193.160.221/32
        rightsourceip=10.193.160.221
        leftsubnet=10.193.160.114/32
        leftsourceip=10.193.160.114
        left=10.193.160.114
        leftprotoport=tcp/80
        leftid=@server_10.193.160.114
        type=tunnel
        auto=route

