7u83-ipsec/templates/strongswan/ipsec.conf.tunnel.erb

<%- @nets.each do |net| -%>
<%- @salifetime = net['lifetime'] ? net['lifetime'] : "3600 sec" -%>
<%- @saencryption = net['encryption'] ? net['encryption'] : @encryption -%>
<%- @pfs_group = net['pfs_group'] ? net['pfs_group'] : @dh_group -%>
<%- @p2hash = net['hash'] ? net['hash'] : @hash  -%>

conn "<%= @title %> <%= net['local'] %> <%= net['remote']%>"
	ikelifetime=<%= @lifetime %>s
	lifetime=<%= @salifetime %>s

        left=<%= @local_ip %>
	leftsubnet=<%= net['local'] %>
	right=<%= @remote_ip %>
        rightsubnet=<%= net['remote'] %>
	ike=<%= @encryption %>-<%= @hash %>-<%= @dh_group %>
	<%- @komma='' -%>	
	esp= <%- @saencryption.each do |saenc| -%> <%- @p2hash.each do |p2h| -%><%= @komma -%><%= saenc %>-<%= p2h %>-<%= @pfs_group -%> <%- @komma=',' %><%- end -%> <%- end -%>


	auto=route
	authby=secret
        keyexchange=ikev1
<% end -%>