packages/net/libreswan/files/ipsec.conf
Lucian Cristian b4b98e2922 libreswan: backport deprecating KLIPS
remove building kernel module, it is not used and is not working with 4.19

rework the ready to use l2tp-ipsec example

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2019-04-21 16:47:51 +03:00

25 lines
560 B
Text

config setup
# needed when using PSK only. Not needed for X.509 based servers
uniqueids=no
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v4:100.64.0.0/10,%v4:!100.64.0.0/24
conn ikev1
authby=secret
pfs=no
auto=add
rekey=no
left=%defaultroute
right=%any
ikev2=never
type=transport
leftprotoport=17/1701
rightprotoport=17/%any
dpddelay=15
dpdtimeout=30
dpdaction=clear
conn ikev1-nat
also=ikev1
rightsubnet=vhost:%priv
# include /etc/ipsec.d/*.conf