document the ipsec::network and ipsec::peer manifests, change default address to...
[mirror/dsa-puppet.git] / modules / ipsec / templates / ipsec.conf.erb
1 # ipsec.conf - strongSwan IPsec configuration file
2
3 # basic configuration
4
5 config setup
6         # strictcrlpolicy=yes
7         # uniqueids = no
8
9 # Add connections here.
10
11 # Sample VPN connections
12
13 #conn sample-self-signed
14 #      leftsubnet=10.1.0.0/16
15 #      leftcert=selfCert.der
16 #      leftsendcert=never
17 #      right=192.168.0.2
18 #      rightsubnet=10.2.0.0/16
19 #      rightcert=peerCert.der
20 #      auto=start
21
22 #conn sample-with-ca-cert
23 #      leftsubnet=10.1.0.0/16
24 #      leftcert=myCert.pem
25 #      right=192.168.0.2
26 #      rightsubnet=10.2.0.0/16
27 #      rightid="C=CH, O=Linux strongSwan CN=peer name"
28 #      auto=start
29
30 include /var/lib/strongswan/ipsec.conf.inc
31 include /etc/ipsec.conf.d/*.conf