pfSense

# Automatically generated config file - DO NOT MODIFY. Changes will be overwritten.

starter {

	load_warning = no

}

charon {

	# number of worker threads in charon

	threads = 16

	ikesa_table_size = 32

	ikesa_table_segments = 4

	init_limit_half_open = 1000

	install_routes = no

	load_modular = yes

	ignore_acquire_ts = yes

	i_dont_care_about_security_and_use_aggressive_mode_psk = yes

	cisco_unity = no

	syslog {

		identifier = charon

		# log everything under daemon since it ends up in the same place regardless with our syslog.conf

		daemon {

			ike_name = yes

			dmn = 2

			mgr = 2

			ike = 0

			chd = 0

			job = 1

			cfg = 2

			knl = 2

			net = 0

			asn = 1

			enc = 0

			imc = 1

			imv = 1

			pts = 1

			tls = 1

			esp = 2

			lib = 2

		}

		# disable logging under auth so logs aren't duplicated

		auth {

			default = -1

		}

	}

	plugins {

		# Load defaults

		include /var/etc/ipsec/strongswan.d/charon/*.conf

		unity {

			load = no

		}

		curve25519 {

			load = yes

		}

	}

}