# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	logfile=/tmp/pluto.log
	logtime=yes
	logappend=no
	plutodebug="all"
	dumpdir=/tmp
	protostack=netkey

conn %default
	ike=aes256-sha2_256;modp2048
	phase2alg=aes128-sha2_512;modp3072

conn north-eastnets
	also=north-east-base
	leftsubnet=192.0.3.0/24
	rightsubnets={ 192.0.2.0/24, 192.0.22.0/24 }
	auto=ignore

include /testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common