| 3 |
- |
1 |
# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
|
|
|
2 |
# RCSID $Id: ipsec.conf.in,v 1.11 2003/06/13 23:28:41 sam Exp $
|
|
|
3 |
|
|
|
4 |
# This file: /usr/local/share/doc/freeswan/ipsec.conf-sample
|
|
|
5 |
#
|
|
|
6 |
# Manual: ipsec.conf.5
|
|
|
7 |
#
|
|
|
8 |
# Help:
|
|
|
9 |
# http://www.freeswan.org/freeswan_trees/freeswan-2.05/doc/quickstart.html
|
|
|
10 |
# http://www.freeswan.org/freeswan_trees/freeswan-2.05/doc/config.html
|
|
|
11 |
# http://www.freeswan.org/freeswan_trees/freeswan-2.05/doc/adv_config.html
|
|
|
12 |
#
|
|
|
13 |
# Policy groups are enabled by default. See:
|
|
|
14 |
# http://www.freeswan.org/freeswan_trees/freeswan-2.05/doc/policygroups.html
|
|
|
15 |
#
|
|
|
16 |
# Examples:
|
|
|
17 |
# http://www.freeswan.org/freeswan_trees/freeswan-2.05/doc/examples
|
|
|
18 |
|
|
|
19 |
|
|
|
20 |
version 2.0 # conforms to second version of ipsec.conf specification
|
|
|
21 |
|
|
|
22 |
# basic configuration
|
|
|
23 |
config setup
|
|
|
24 |
interfaces=%defaultroute
|
|
|
25 |
# Debug-logging controls: "none" for (almost) none, "all" for lots.
|
|
|
26 |
# klipsdebug=all
|
|
|
27 |
# plutodebug=dns
|
|
|
28 |
protostack=netkey
|
|
|
29 |
nat_traversal=yes
|
|
|
30 |
|
|
|
31 |
conn block
|
|
|
32 |
auto=ignore
|
|
|
33 |
|
|
|
34 |
conn private
|
|
|
35 |
auto=ignore
|
|
|
36 |
|
|
|
37 |
conn private-or-clear
|
|
|
38 |
auto=ignore
|
|
|
39 |
|
|
|
40 |
conn clear-or-private
|
|
|
41 |
auto=ignore
|
|
|
42 |
|
|
|
43 |
conn clear
|
|
|
44 |
auto=ignore
|
|
|
45 |
|
|
|
46 |
conn packetdefault
|
|
|
47 |
auto=ignore
|