From dceafb31b9e065bdf5197b1b85b0f94933e88fa7 Mon Sep 17 00:00:00 2001
From: florian <florian@3c298f89-4303-0410-b956-a3cf2f4a3e73>
Date: Wed, 28 Feb 2007 13:30:51 +0000
Subject: Add strongswan (#1330)

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6429 3c298f89-4303-0410-b956-a3cf2f4a3e73
---
 package/strongswan/files/ipsec.config | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 package/strongswan/files/ipsec.config

(limited to 'package/strongswan/files/ipsec.config')

diff --git a/package/strongswan/files/ipsec.config b/package/strongswan/files/ipsec.config
new file mode 100644
index 000000000..b4865e40b
--- /dev/null
+++ b/package/strongswan/files/ipsec.config
@@ -0,0 +1,21 @@
+
+# Configure button/light behavior here.
+config device
+	option reset_button	ses
+	option status_start	ses_orange
+	option status_valid	ses_white
+
+# iptables setup for traffic to/from this host
+config filter
+	option rule_in		input_rule
+	option dest_in		ACCEPT
+	option rule_out		output_rule
+	option dest_out		ACCEPT
+
+# iptables setup for traffic to/from another host
+config forward
+	option rule_in		forwarding_rule
+	option dest_in		forwarding_vpn_in
+	option rule_out		forwarding_rule
+	option dest_out		forwarding_vpn_out
+
-- 
cgit v1.2.3