ASR_BASE
Change-Id: Icf3719cc0afe3eeb3edc7fa80a2eb5199ca9dda1
diff --git a/external/subpack/net/libreswan/files/ipsec.conf b/external/subpack/net/libreswan/files/ipsec.conf
new file mode 100644
index 0000000..8b7493b
--- /dev/null
+++ b/external/subpack/net/libreswan/files/ipsec.conf
@@ -0,0 +1,25 @@
+config setup
+ # needed when using PSK only. Not needed for X.509 based servers
+ uniqueids=no
+ virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v4:100.64.0.0/10,%v4:!100.64.0.0/24
+
+conn ikev1
+ authby=secret
+ pfs=no
+ auto=add
+ rekey=no
+ left=%defaultroute
+ right=%any
+ ikev2=never
+ type=transport
+ leftprotoport=17/1701
+ rightprotoport=17/%any
+ dpddelay=15
+ dpdtimeout=30
+ dpdaction=clear
+
+conn ikev1-nat
+ also=ikev1
+ rightsubnet=vhost:%priv
+
+# include /etc/ipsec.d/*.conf