[strongSwan] multiple remote_ts with ikev1 file format

Marco Berizzi pupilla at hotmail.com
Fri Feb 23 13:36:03 CET 2018


Rich Lafferty <rich at lafferty.ca> wrote:

> > Is there a way to not write in every section the parameters
> > common to all the children sections (rekey_time, esp_proposals…)?

> I wasn’t able to find a way to set defaults, but I’ve put my common parameters in /etc/swanctl/swanctl-ipsec.conf and then > done
>  "include swanctl-ipsec.conf” in each child config. If someone else knows a better way, though, I’m all ears!

Thanks a lot Rich for the tips.


More information about the Users mailing list