# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup

conn rw
    keyexchange=ikev1
    left=192.168.1.239
    leftcert=server.pem
    leftid="C=DE, O=myVPN, CN=192.168.1.239"
    leftsendcert=always
    leftauth=pubkey
    leftsubnet=192.168.21.0/24
    leftfirewall=yes
    right=%any
    rightauth=pubkey
    rightauth2=xauth
    rightsourceip = 192.168.1.0/24
    rightsendcert=ifasked
    auto=add
    ike="aes256-sha384-modp1024"