# /etc/ipsec.conf - Openswan IPsec configuration file
#
# Manual:     ipsec.conf.5
#
# Please place your own config files in /etc/ipsec.d/ ending in .conf

version	2.0	# conforms to second version of ipsec.conf specification

# basic configuration
#config setup
	# Debug-logging controls:  "none" for (almost) none, "all" for lots.
	# klipsdebug=none
	# plutodebug="control parsing"
#	nat_traversal=yes

#include /etc/ipsec.d/*.conf
conn net-to-net
    left=[public.ip]               # Local vitals
    leftsubnet=10.1.2.0/24         #
    leftid=@wasp.loadedhosting.com #
    leftrsasigkey=[removed]	#
    leftnexthop=%defaultroute      # correct in many situations
    right=[public.ip]            # Remote vitals
    rightsubnet=172.16.200.0/24    #
    rightid=@fw156.jmrcorp.com     #
    rightrsasigkey=[removed]	#
    rightnexthop=%defaultroute     # correct in many situations
    auto=add                       # authorizes but doesn't start this
                                   # connection at startup