# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
	# plutodebug=all
	# crlcheckinterval=600
	# strictcrlpolicy=yes
	# cachecrls=yes
	nat_traversal=yes
	# charonstart=no
	# plutostart=no
	charonstart=yes
	plutostart=yes

# Add connections here.

# Sample VPN connections

#conn sample-self-signed
#      left=%defaultroute
#      leftsubnet=10.1.0.0/16
#      leftcert=selfCert.der
#      leftsendcert=never
#      right=192.168.0.2
#      rightsubnet=10.2.0.0/16
#      rightcert=peerCert.der
#      auto=start

#conn sample-with-ca-cert
#      left=%defaultroute
#      leftsubnet=10.1.0.0/16
#      leftcert=myCert.pem
#      right=192.168.0.2
#      rightsubnet=10.2.0.0/16
#      rightid="C=CH, O=Linux strongSwan CN=peer name"
#      keyexchange=ikev2
#      auto=start

conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	keyingtries=0

conn intero
	type=tunnel # Needed?
	left=%defaultroute
	leftsourceip=%config
	leftid=@GroupVPN
	right=[Sonicwall WAN IP]
	rightsubnet=192.168.5.0/24
	rightid=@[Sonicwall MAC Address]
	xauth=client
	auto=add
	auth=esp
	authby=xauthpsk
	esp=3des-sha1!
	ike=3des-sha1!
	pfs=no
	keyexchange=ikev1

