# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
        # strictcrlpolicy=yes
        # uniqueids = no

# Add connections here.


conn NordVPN_US5783
        keyexchange=ikev2
        dpdaction=clear
        dpddelay=300s
        eap_identity="FEaYDjUGWcnUuFW4gDfVR1kk"
        leftsendcert=never
        leftauth=eap-mschapv2
        left=%defaultroute
        leftsourceip=%config
        leftupdown=/etc/strongswan.d/scripts/connected
        right=45.79.75.213
        rightauth=pubkey
        rightsubnet=0.0.0.0/0
        rightid=@us5783.nordvpn.com
        rightca=/etc/ipsec.d/cacerts/NordVPN.pem
        fragmentation=yes
        type=tunnel
        auto=start

conn NordVPN_599_JP
        keyexchange=ikev2
        dpdaction=clear
        dpddelay=300s
        eap_identity="FEaYDjUGWcnUuFW4gDfVR1kk"
        leftsendcert=never
        leftauth=eap-mschapv2
        left=%defaultroute
        leftsourceip=%config
        leftupdown=/etc/strongswan.d/scripts/connected
        right=172.104.91.91
        rightauth=pubkey
        rightsubnet=0.0.0.0/0
        rightid=@jp599.nordvpn.com
        rightca=/etc/ipsec.d/cacerts/NordVPN.pem
        fragmentation=yes
        type=tunnel
        auto=start


include /var/ipsec/ipsec.conf