# strongswan.conf - strongSwan configuration file  
 charon {  
     i_dont_care_about_security_and_use_aggressive_mode_psk = yes 
#.............. strongswan5.0.1................... ike....aggrisive.. 
     install_virtual_ip = yes
     duplicheck.enable = no
#............ID........
     #interfaces_use = em0   #.................................
     # number of worker threads in charon  
     threads = 16  
     dns1=114.114.114.114
     dns2=8.8.8.8
     # send strongswan vendor ID?  
     # send_vendor_id = yes  
     plugins {  
		sql {  
			# loglevel to log into sql database  
			loglevel = -1  
			# URI to the database  
			# database = sqlite:///path/to/file.db  
			# database = mysql://user:password@localhost/database  
		}  
     eap-radius {  
         #eap_start = yes  
         accounting = yes  
         servers {  
         primary {  
             address = RADIUSSERVER
#......Radius........FreeRadius.strongswan.......... localhost..127.0.0.1 
#..... servers {} ........Radius... primary,2nd,last1..................primary
             secret = RADIUSSECRET
			 #nas_identifier = VPNIP
             auth_port = RADIUSAUTH
             acct_port = RADIUSACCT
                 }  
             }  
         }  
     xauth-eap {  
#.............ike v1 .............cisco ipsec..
         backend = radius  
         }  
 }  
  # Two defined file loggers. Each subsection is either a file  
   # in the filesystem or one of: stdout, stderr.  
   filelog {  
     /var/log/charon.log {  
       # add a timestamp prefix  
       time_format = %b %e %T  
       # loggers to files also accept the append option to open files in  
       # append mode at startup (default is yes)  
       append = no  
       # the default loglevel for all daemon subsystems (defaults to 1).  
       default = -1  
       # flush each line to disk  
       flush_line = yes  
     }  
     stderr {  
       # more detailed loglevel for a specific subsystem, overriding the  
       # default loglevel.  
       ike = -1 
       knl = -1  
       # prepend connection name, simplifies grepping  
       ike_name = yes  
     }  
   }  
   # And two loggers using syslog. The subsections define the facility to log  
   # to, currently one of: daemon, auth.  
   syslog {  
     # optional identifier used with openlog(3), prepended to each log message  
     # by syslog. if not configured, openlog(3) is not called, so the value will  
     # depend on system defaults (usually the program name)  
     identifier = charon-custom  
     # default level to the LOG_DAEMON facility  
     daemon {  
     }  
     # very minimalistic IKE auditing logs to LOG_AUTHPRIV  
     auth {  
       default = 0  
       ike = 0  
     }  
   }  
     # ...  
 }  
 pluto {
     dns1=114.114.114.114
     dns2=8.8.8.8
 }  
 libstrongswan {  
     # set to no, the DH exponent size is optimized  
     # dh_exponent_ansi_x9_42 = no  
 }  
