# Syn-3 ipsec configuration (C)DatuX 2016


version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        #plutoopts="--disable_port_floating"
        virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
        # which IPsec stack to use. netkey,klips,mast,auto or none
        protostack=netkey

conn %default
        dpdaction=restart
        dpddelay=30
        dpdtimeout=120
        ikev2=never
        #stay compatible with some propiertary modems that have trouble rekeying earlier. (packetloss)
        ikelifetime=24h
        salifetime=24h
        
include /etc/ipsec.d/tunnels/*.conf