# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	logfile=/tmp/pluto.log
	logtime=no
	logappend=no
	plutodebug=all
	dumpdir=/tmp

conn %default
	pfs=no
	ikelifetime=300s
        rekey=yes
        rekeymargin=40s

conn road-east-ipv4-psk-ikev2
	also=road-east-x509
	leftsubnets={ 192.0.1.0/24, 192.0.11.0/24}
	rightsubnet=192.0.2.0/24
	auto=ignore

conn road-east-ipv6-psk-ikev2
	also=road-east-base-ipv6
	also=road-east-base-id-nss
	leftsubnet=2001:db8:0:3::0/64
	rightsubnet=2001:db8:0:2::0/64
	auto=ignore

conn road-east-common
	dpdaction=restart
	dpddelay=60
	dpdtimeout=240
	ikelifetime=4m
	keyingtries=%forever
	salifetime=2m

include /testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common