7u83-ipsec/templates/strongswan/ipsec.conf.tunnel.erb

24 lines
858 B
Plaintext

<%- @nets.each do |net| -%>
<%- @salifetime = net['lifetime'] ? net['lifetime'] : "3600 sec" -%>
<%- @saencryption = net['encryption'] ? net['encryption'] : @encryption -%>
<%- @pfs_group = net['pfs_group'] ? net['pfs_group'] : @dh_group -%>
<%- @p2hash = net['hash'] ? net['hash'] : @hash -%>
conn "<%= @title %> <%= net['local'] %> <%= net['remote']%>"
ikelifetime=<%= @lifetime %>s
lifetime=<%= @salifetime %>s
left=<%= @local_ip %>
leftsubnet=<%= net['local'] %>
right=<%= @remote_ip %>
rightsubnet=<%= net['remote'] %>
ike=<%= @encryption %>-<%= @hash %>-<%= @dh_group %>
<%- @komma='' -%>
esp= <%- @saencryption.each do |saenc| -%> <%- @p2hash.each do |p2h| -%><%= @komma -%><%= saenc %>-<%= p2h %>-<%= @pfs_group -%> <%- @komma=',' %><%- end -%> <%- end -%>
auto=route
authby=secret
keyexchange=ikev1
<% end -%>