vyos@vyos# sudo cat /etc/swanctl/swanctl.conf ### Autogenerated by vpn_ipsec.py ### connections { vpn_01 { proposals = aes256-sha512-ecp384 version = 2 local_addrs = 10.110.2.52 # dhcp:no remote_addrs = 10.110.1.52 dpd_timeout = 120 dpd_delay = 3 rekey_time = 0s mobike = yes keyingtries = 0 local { id = "10.110.2.52" auth = psk } remote { id = "10.110.1.52" auth = psk } children { vpn_01-vti { esp_proposals = aes128-sha512-ecp256 life_time = 1800s local_ts = 0.0.0.0/0,::/0 remote_ts = 0.0.0.0/0,::/0 updown = "/etc/ipsec.d/vti-up-down vti01" if_id_in = 2 if_id_out = 2 ipcomp = no mode = tunnel start_action = start dpd_action = restart close_action = none replay_window = 32 } } } } pools { } secrets { ike-VPN_01 { # ID's from auth psk id xxx id-02de5604-2adb-4f75-8df5-604b845027b4 = "10.110.2.52" secret = "vyos" } }