# /etc/strongswan.conf - strongSwan configuration file charon { load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac socket-default kernel-netlink stroke eap-identity eap-ttls eap-md5 eap-tnc tnc-pdp tnc-imv tnc-tnccs tnccs-20 plugins { eap-ttls { phase2_method = md5 phase2_piggyback = yes phase2_tnc = yes } eap-tnc { protocol = tnccs-2.0 } tnc-pdp { server = aaa.strongswan.org secret = gv6URkSs } } } libimcv { debug_level = 3 plugins { imv-test { rounds = 1 } imv-scanner { closed_port_policy = yes tcp_ports = 22 udp_ports = 500 4500 } } }