extras/strongswan/configs/responder_nat/ipsec.conf

   1 config setup
   2   strictcrlpolicy=no
   3
   4 conn initiator
   5   mobike=no
   6   auto=add
   7   type=tunnel
   8   keyexchange=ikev2
   9   ike=aes256gcm16-prfsha256-modp2048!
  10   esp=aes256gcm16-esn!
  11
  12 # local:
  13   leftauth=psk
  14   leftid=@roadwarrior.vpn.example.com
  15   leftsubnet=192.168.5.0/24
  16
  17 # remote: (gateway)
  18   rightid=@vpp.home
  19   right=192.168.10.2
  20   rightauth=psk
  21   rightsubnet=192.168.3.0/24
  22