strongSwan

= ipsec.conf =

== config setup ==

* ''cachecrls''

* ''charonstart''

* ''crlcheckinterval''

* ''plutostart''

* ''strictcrlpolicy''

'''IKEv1 pluto daemon only:'''

* ''keep_alive''

* ''nat_traversal''

* ''pkcs11initargs''

* ''pkcs11module''

* ''pkcs11keepstate''

* ''pkcs11proxy''

* ''plutodebug''

* ''postpluto''

* ''prepluto''

* ''virtual_private''

* ''uniqueids''

'''IKEv2 charon daemon only:'''

* ''charondebug''

== conn <name> ==

* ''ah''

* ''auth''

* ''authby''

* ''auto''

* ''compress''

* ''dpdaction''

* ''dpddelay''

* ''dpdtimeout''

* ''eap''

* ''esp''

* ''ike''

* ''ikelifetime''

* ''keyexchange''

* ''keyingtries''

* ''keylife''

* ''mobike''

* ''modeconfig''

* ''pfs''

* ''reauth''

* ''rekey''

* ''rekeyfuzz''

* ''rekeymargin''

* ''type''

* ''xauth''

'''left|right end parameters'''

* ''left|right''

* ''left|rightallowany''

* ''left|rightca''

* ''left|rightcert''

* ''left|rightfirewall''

* ''left|rightgroups''

* ''left|righthostaccess''

* ''left|rightid''

* ''left|rightnexthop''

* ''left|rightprotoport''

* ''left|rightrsasigkey''

* ''left|rightsendcert''

* ''left|rightsourceip''

* ''left|rightsubnet''

* ''left|rightsubnetwithin''

* ''left|rightupdown''

== ca <name> ==

* ''auto''

* ''cacert''

* ''crluri''

* ''crluri1''

    synonym for ''crluri''.

* ''crluri2''

* ''ldaphost''

* ''ocspuri''

* ''ocspuri1''

    synonym for ''ocspuri''.

* ''ocspuri2'''