#configuration is in ipsec.conf file
config setup
    uniqueids = yes
    cachecrls = yes
    strictcrlpolicy = no

ca "RACINE AGRIATES_CA"
    cacert = "RACINE AGRIATES.pem"
    crluri = http://crl1.igc.education.fr/agriates
    crluri2 =
    auto=add

conn %default
    keyingtries = 3
    keyexchange = ike
    authby = pubkey
    dpdaction = restart
    dpddelay = 120s
    ike = aes128-sha256-modp2048,aes192-sha384-modp3072
    esp = aes128gcm128,aes192gcm128,aes128-sha256
    forceencaps = no
    mobike = no

#DEB:pf0348890d-sphynx3_1-admin-reseau192
conn "pf0348890d-sphynx3_1-admin-reseau192"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "10.34.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=montpellier, O=Education Nationale, OU=ac-montpellier, OU=0002 110043015, CN=sphynx-PNCN.ac-montpellier.fr"
    right = 195.83.225.227
    rightsubnet = "192.168.0.0/16"
    auto=start
#FIN:pf0348890d-sphynx3_1-admin-reseau192

#DEB:pf0348890d-sphynx3_1-admin-reseau172
conn "pf0348890d-sphynx3_1-admin-reseau172"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "10.34.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=montpellier, O=Education Nationale, OU=ac-montpellier, OU=0002 110043015, CN=sphynx-PNCN.ac-montpellier.fr"
    right = 195.83.225.227
    rightsubnet = "172.16.0.0/12"
    auto=start
#FIN:pf0348890d-sphynx3_1-admin-reseau172

#DEB:pf0348890d-sphynx3_1-admin-reseau_ader
conn "pf0348890d-sphynx3_1-admin-reseau_ader"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "10.34.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=montpellier, O=Education Nationale, OU=ac-montpellier, OU=0002 110043015, CN=sphynx-PNCN.ac-montpellier.fr"
    right = 195.83.225.227
    rightsubnet = "161.48.0.0/19"
    auto=start
#FIN:pf0348890d-sphynx3_1-admin-reseau_ader

#DEB:pf0348890d-sphynx3_1-admin-reseau10
conn "pf0348890d-sphynx3_1-admin-reseau10"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "10.34.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=montpellier, O=Education Nationale, OU=ac-montpellier, OU=0002 110043015, CN=sphynx-PNCN.ac-montpellier.fr"
    right = 195.83.225.227
    rightsubnet = "10.0.0.0/8"
    auto=start
#FIN:pf0348890d-sphynx3_1-admin-reseau10

#DEB:pf0348890d-sphynx3_1-reseau_rie-admin0
conn "pf0348890d-sphynx3_1-reseau_rie-admin0"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "10.34.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=montpellier, O=Education Nationale, OU=ac-montpellier, OU=0002 110043015, CN=sphynx-PNCN.ac-montpellier.fr"
    right = 195.83.225.227
    rightsubnet = "100.64.0.0/12"
    auto=start
#FIN:pf0348890d-sphynx3_1-reseau_rie-admin0

#DEB:pf0348890d-mic-sphynx-cd34_1-pedago-reseau_cd34
conn "pf0348890d-mic-sphynx-cd34_1-pedago-reseau_cd34"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "10.134.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348888B-01.ac-montpellier.fr"
    right = 212.51.190.228
    rightsubnet = "172.19.34.0/24"
    auto=start
#FIN:pf0348890d-mic-sphynx-cd34_1-pedago-reseau_cd34

#DEB:pf0348890d-mic-sphynx-cd34_1-pedago_wifi-reseau_cd34
conn "pf0348890d-mic-sphynx-cd34_1-pedago_wifi-reseau_cd34"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "172.22.72.0/22"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348888B-01.ac-montpellier.fr"
    right = 212.51.190.228
    rightsubnet = "172.19.34.0/24"
    auto=start
#FIN:pf0348890d-mic-sphynx-cd34_1-pedago_wifi-reseau_cd34

#DEB:pf0348890d-mic-sphynx-cd34_1-mgt-reseau_cd34
conn "pf0348890d-mic-sphynx-cd34_1-mgt-reseau_cd34"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "172.19.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348888B-01.ac-montpellier.fr"
    right = 212.51.190.228
    rightsubnet = "172.19.34.0/24"
    auto=start
#FIN:pf0348890d-mic-sphynx-cd34_1-mgt-reseau_cd34

#DEB:pf0348890d-mic-sphynx-cd34_1-admin-reseau_cd34
conn "pf0348890d-mic-sphynx-cd34_1-admin-reseau_cd34"
    leftid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348890D-01.ac-montpellier.fr"
    leftcert = "0348890D-01.ac-montpellier.fr.pem"
    left = 212.51.190.245
    leftsubnet = "10.34.199.0/24"
    leftupdown = /etc/ipsec.d/ipsec_updown
    rightid = "C=FR, L=Montpellier, O=Education Nationale, OU=Academie de Montpellier, OU=0002 110043015, CN=0348888B-01.ac-montpellier.fr"
    right = 212.51.190.228
    rightsubnet = "172.19.34.0/24"
    auto=start
#FIN:pf0348890d-mic-sphynx-cd34_1-admin-reseau_cd34
#personalisation AMON 2.7
include /etc/ipsec.d/conf/*
#