# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.15.2.6 2006/10/19 03:49:46 paul Exp $

# This file:  /usr/local/share/doc/openswan/ipsec.conf-sample
#
# Manual:     ipsec.conf.5


version 2.0     # conforms to second version of ipsec.conf specification


# basic configuration
config setup
        interfaces=%defaultroute
        # NAT-TRAVERSAL support, see README.NAT-Traversal
        nat_traversal=yes

# Add connections here
conn deepakpsk
        left=10.10.136.94
        leftsubnet=192.168.1.0/255.255.255.0
        leftid=@deepak
        leftnexthop=%direct
        right=10.10.136.97
        rightsubnet=172.168.1.0/255.255.255.0
        rightid=@yogesh
        rightnexthop=%direct
        authby=secret
        also=deepakpsk1
        auto=start

conn deepakpsk1
        keyexchange=ike
        aggrmode=no
        keyingtries=1
        ike=3des-md5-modp1024
        ikelifetime=1h
        esp=3des-md5
        compress=no
        keylife=1h
        pfs=no
        failureshunt=passthrough


#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf

*******************************ipsec.secrets************
@deepak @yogesh : PSK "helloworld"