version 2.0
include /etc/openswan/ipsec.d/examples/no_oe.conf
config setup
        # Debug-logging controls:  "none" for (almost) none, "all" for lots.
        # klipsdebug=all
        # plutodebug="control parsing"
conn local
        left=%any
        leftrsasigkey=%cert
        leftcert=/etc/pki/tls/Pukey/Pukey-cacert.pem
        right=%any # NAT Server and PDC
        rightrsasigkey=%cert
        rightcert=%same # PDC's Cert
        auto=add
        rightsubnet=0.0.0.0/0
conn l2tp-X.509
        left=%any
        leftrsasigkey=%cert
        leftcert=/etc/pki/tls/Pukey/Pukey-cacert.pem
        right=%any # NAT Server and PDC
        rightrsasigkey=%cert
        rightcert=%same # PDC's Cert
        auto=add
        rightsubnet=0.0.0.0/0
        rightprotoport=17/1701
        authby=rsasig
        pfs=no
        rekey=no