# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	logfile=/tmp/pluto.log
	logtime=yes
	logappend=no
	plutodebug=all
	dumpdir=/tmp
	protostack=netkey

conn westnet-eastnet-test
	also=west-east-base
	also=westnet
	also=eastnet
	authby=secret
	rekeymargin=5s
	rekeyfuzz=0%
	retransmit-interval=15000 # slow retransmits

conn east
	also=westnet-eastnet-test
	rekey=yes

conn west
	also=westnet-eastnet-test
	ikelifetime=70s
	salifetime=50s
	rekey=yes

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common