strongSwan

= ipsec.conf =

config setup

• ''cachecrls''

• ''charonstart''

• ''crlcheckinterval''

• ''plutostart''

• ''strictcrlpolicy''

'''IKEv1 pluto daemon only:'''

• ''keep_alive''

• ''nat_traversal''

• ''pkcs11initargs''

• ''pkcs11module''

• ''pkcs11keepstate''

• ''pkcs11proxy''

• ''plutodebug''

• ''postpluto''

• ''prepluto''

• ''virtual_private''

• ''uniqueids''

'''IKEv2 charon daemon only:'''

• ''charondebug''

conn <name>

• ''ah''

• ''auth''

• ''authby''

• ''auto''

• ''compress''

• ''dpdaction''

• ''dpddelay''

• ''dpdtimeout''

• ''eap''

• ''esp''

• ''ike''

• ''ikelifetime''

• ''keyexchange''

• ''keyingtries''

• ''keylife''

• ''mobike''

• ''modeconfig''

• ''pfs''

• ''reauth''

• ''rekey''

• ''rekeyfuzz''

• ''rekeymargin''

• ''type''

• ''xauth''

'''left|right end parameters'''

• ''left|right''

• ''left|rightallowany''

• ''left|rightca''

• ''left|rightcert''

• ''left|rightfirewall''

• ''left|rightgroups''

• ''left|righthostaccess''

• ''left|rightid''

• ''left|rightnexthop''

• ''left|rightprotoport''

• ''left|rightrsasigkey''

• ''left|rightsendcert''

• ''left|rightsourceip''

• ''left|rightsubnet''

• ''left|rightsubnetwithin''

• ''left|rightupdown''

ca <name>

• ''auto''

• ''cacert''

• ''crluri''

• ''crluri1''
  synonym for ''crluri''.

• ''crluri2''

• ''ldaphost''

• ''ocspuri''

• ''ocspuri1''
  synonym for ''ocspuri''.

• ''ocspuri2'''