# ipsec.conf - strongSwan IPsec configuration file # basic configuration config setup conn rw keyexchange=ikev1 left=192.168.1.239 leftcert=server.pem leftid="C=DE, O=myVPN, CN=192.168.1.239" leftsendcert=always leftauth=pubkey leftsubnet=192.168.21.0/24 leftfirewall=yes right=%any rightauth=pubkey rightauth2=xauth rightsourceip = 192.168.1.0/24 rightsendcert=ifasked auto=add ike="aes256-sha384-modp1024"