conn uml1-uml2 # Left (freeswan-1.98b + alg-0.8.0 ) left=192.168.2.18 leftsubnet=10.1.18.0/24 leftrsasigkey=0s....... # Right (freeswan-1.98b + alg-0.8.0 ) right=192.168.2.20 rightsubnet=10.1.20.0/24 rightrsasigkey=0s....... # To authorize this connection, but not actually start it, at startup, # uncomment this. auto=add auth=esp #authby=secret authby=rsasig pfs=yes # #freeswan-alg 0.7.x+ required for esp= parameter # #esp=twofish256 esp=aes128-md5,aes128-sha2_256 #esp=aes128 # #freeswan-alg 0.8.x+ required for pfsgroup= parameter pfsgroup=modp1536 # # #freeswan-alg 0.8.x+ required for ike= parameter # #ike=aes128-md5 ike=aes256-md5-modp4096 #ike=aes128-sha2_256 #ike=twofish-sha2_256 #ike=serpent-sha2_256