# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
        # strictcrlpolicy=yes
        # uniqueids = no

# Add connections here.

conn peer-your_domain.net-tunnel-1
    left=%any
    right=<<DEDICATED_SERVER_IP>>
    leftsubnet=192.168.1.0/24
    rightsubnet=10.0.1.0/24
    ike=aes128-sha1-modp2048!
    keyexchange=ikev1
    ikelifetime=28800s
    esp=aes128-sha1-modp2048!
    keylife=3600s
    rekeymargin=540s
    type=tunnel
    compress=no
    authby=secret
    auto=route
    keyingtries=%forever