# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.1.2.1 2002/09/19 16:42:58 mcr Exp $

# More elaborate and more varied sample configurations can be found
# in FreeS/WAN's doc/examples file, and in the HTML documentation.
# As supplied (before any editing) this file is equivalent to an empty
# or absent one. A virgin copy of this file can be found in
#
#  @EXAMPLECONFDIR@/ipsec.conf-sample
#


version	2.0	# conforms to second version of ipsec.conf specification

# basic configuration
config setup
	# THIS SETTING MUST BE CORRECT or almost nothing will work;
	# %defaultroute is okay for most simple cases.
	#default# interfaces=%defaultroute
	# Debug-logging controls:  "none" for (almost) none, "all" for lots.
	#default# klipsdebug=none
	#default# plutodebug=none
	# Close down old connection when new one using same ID shows up.
	#default# uniqueids=yes



# defaults for subsequent connection descriptions
conn %default
	#default# keyingtries=%forever
	#default# disablearrivalcheck=no
	#default# authby=rsasig
	#default# leftrsasigkey=%dnsondemand
	#default# rightrsasigkey=%dnsondemand

# user defined conn's may be added from this point down. 
# DO NOT add conns before the "conn %default"



# Connection description for opportunistic encryption between this machine
# and the world.  Supplied implicitly!
# To suppress or change, you must define a new one with the same name.
# Requires KEY record in your DNS reverse map; see doc/opportunism.howto.
# Initiator-only OE requires leftid=.
#implicit#	conn OEself
#implicit#		left=%defaultroute
#implicit#		leftrsasigkey=%dnsondemand
#implicit#		right=%opportunistic
#implicit#		rightrsasigkey=%dnsondemand
#implicit#		keyingtries=3
#implicit#		ikelifetime=1h
#implicit#		keylife=1h
#implicit#		rekey=no
#implicit#		auto=route

#suppress#	conn OEself
#suppress#		auto=ignore


# sample VPN connection
#sample#	conn sample
#sample#		# Left security gateway, subnet behind it, next hop toward right.
#sample#		left=10.0.0.1
#sample#		leftsubnet=172.16.0.0/24
#sample#		leftnexthop=10.22.33.44
#sample#		# Right security gateway, subnet behind it, next hop toward left.
#sample#		right=10.12.12.1
#sample#		rightsubnet=192.168.0.0/24
#sample#		rightnexthop=10.101.102.103
#sample#		# To authorize this connection, but not actually start it, at startup,
#sample#		# uncomment this.
#sample#		#auto=add
