# ipsec.conf - strongSwan IPsec configuration file

config setup
        strictcrlpolicy=no
        #charonstart=yes
        #plutostart=no
        charondebug="default = 3,mgr = 1,ike = 1,net = 1,enc = 0,cfg = 2,asn = 1,job = 1,knl = 1,append=no,ike_name=no,flush_line=yes"

# Add connections here.
conn vpn
       authby=psk
       ikelifetime=60m
       keyexchange=ikev2
       left=%any
       leftsubnet=10.10.10.0/24
       rightauth=psk
       right=%any
       eap_identity=%any
       auto=add