ipsec-tools/src/setkey/sample-policy01.cf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

#
# This is for basic policy test on loopback.
#

spdflush;
spdadd 127.0.0.1 127.0.0.1 icmp
	-P out ipsec
	esp/transport//require ;
spdadd ::1 ::1 icmp6
	-P out ipsec
	esp/transport//require ;

flush;
add 127.0.0.1 127.0.0.1 esp 0x1000
	-m transport
	-E des-cbc "kamekame";
add ::1 ::1 esp 0x1001
	-m transport
	-E des-cbc "hagehage";
flush;