7u83-ipsec/templates/strongswan/ipsec.conf.tunnel.erb

18 lines
622 B
Plaintext

<%- @nets.each do |net| -%>
<%- @salifetime = net['lifetime'] ? net['lifetime'] : "3600 sec" -%>
<%- @saencryption = net['encryption'] ? net['encryption'] : @encryption -%>
<%- @pfs_group = net['pfs_group'] ? net['pfs_group'] : @dh_group -%>
<%- @p2hash = net['hash'] ? net['hash'] : @hash -%>
conn "<%= @title %>"
left=<%= @local_ip %>
leftsubnet=<%= net['local'] %>
right=<%= @remote_ip %>
rightsubnet=<%= net['remote'] %>
ike=<%= @encryption %>-<%= @hash %>-<%= @dh_group %>
esp=<%= @saencryption %>-<%= @p2hash %>-<%= @pfs_group %>
auto=start
authby=secret
keyexchange=ikev1
<% end -%>