# /etc/ipsec.conf
# M.Szychowiak 2019
# left = local, right = remote
# conn = SA

# generic IPsec/IKE settings for host-to-host SA
conn host-to-host
    ikelifetime=60m
    keylife=20m
    rekeymargin=3m
    keyingtries=1
    left=150.254.32.75
    right=150.254.32.76    
    type=transport
    authby=psk
    auto=route