# ipsec.conf - strongSwan IPsec configuration file

config setup
  charondebug = ike 3, cfg 3

conn %default
  keyexchange=ikev2
  ikelifetime=60m
  keylife=20m
  rekeymargin=3m
  rekey=no
  dpdaction=restart
  dpddelay=30s
  compress=yes
  auto=start

conn alconet
  leftupdown=/usr/local/sbin/ipsec-notify.sh
  left=%defaultroute
  leftauth=eap
  leftsourceip=%config4,%config6
  rightauth=pubkey
  rightsubnet=0.0.0.0/0,::/0
  eap_identity=%identity
  leftid=bmanovic
  right=ipsec.domena.sk
  rightid=@ipsec.domena.sk
  mark=38
