enabled firewall support

2006-09-18 07:41:54 +00:00
1 parent f9aa9e2977
commit 957115957a
@@ -9,13 +9,14 @@ conn %default
 	keylife=20m
 	rekeymargin=3m
 	keyingtries=1
+	keyexchange=ikev2

 conn host-host
 	left=PH_IP_MOON
 	leftnexthop=%direct
 	leftcert=moonCert.pem
 	leftid=@moon.strongswan.org
+	leftfirewall=yes
 	right=PH_IP_SUN
 	rightid=@sun.strongswan.org
-	keyexchange=ikev2
 	auto=add
@@ -9,13 +9,14 @@ conn %default
 	keylife=20m
 	rekeymargin=3m
 	keyingtries=1
+	keyexchange=ikev2

 conn host-host
 	left=PH_IP_SUN
 	leftnexthop=%direct
 	leftcert=sunCert.pem
 	leftid=@sun.strongswan.org
+	leftfirewall=yes
 	right=PH_IP_MOON
 	rightid=@moon.strongswan.org
-	keyexchange=ikev2
 	auto=add