# /etc/ipsec.conf - strongSwan IPsec configuration file

config setup

conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	keyingtries=1
	keyexchange=ikev2

conn net-net
	left=192.168.0.1
	leftsubnet=10.1.0.0/16
	leftid=@moon.strongswan.org
	leftsigkey="dns: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"
	leftauth=pubkey
	leftfirewall=yes
	right=192.168.0.2
	rightsubnet=10.2.0.0/16
	rightid=@sun.strongswan.org
	rightsigkey="dns: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"
	rightauth=pubkey
	auto=add
