strongswan 配置文件 /etc/ipsec.conf 速查手册1

• 配置选项 auto = ignore | add | route | start

英文文档:
https://wiki.strongswan.org/projects/strongswan/wiki/ConnSection

auto = ignore | add | route | start

what operation, if any, should be done automatically at IPsec startup.

auto=add loads a connection without starting it.
auto=route loads a connection and installs kernel traps. If traffic is detected between leftsubnet and rightsubnet, a connection is established.
auto=start loads a connection and brings it up immediately.
auto=ignore ignores the connection. This is equal to deleting a connection from the config file. Relevant only locally, other end need not agree on it.

译文1

选项	含义
auto=add	进程启动时仅读取连接配置参数, 不主动发起连接。适用于服务器端等待客户端主动发起连接请求的情况。
auto=route	直到左右两端子网的任意主机向对方发起访问请求时才会创建 IPsec 连接。
auto=start	进程主动时立即建立 IPsec 安全连接。
auto=ignore	该条配置将被忽略。

配置选项 esp = <cipher suites>

comma-separated list of ESP encryption/authentication algorithms to be used for the connection, e.g:

esp=aes128-sha256

Th