# /etc/ipsec.conf - strongSwan IPsec configuration file config setup charondebug="tls 2" conn %default ikelifetime=60m keylife=20m rekeymargin=3m keyingtries=1 keyexchange=ikev2 conn rw-eap left=PH_IP_MOON leftsubnet=10.1.0.0/16 leftcert=moonCert.pem leftauth=eap-ttls leftfirewall=yes rightauth=eap-ttls rightsendcert=never right=%any auto=add