version 2.0

config setup
        interfaces="ipsec0=eth1"
        klipsdebug=none
        plutodebug="none"
        dumpdir=
        manualstart=
        fragicmp=yes
        hidetos=yes
        uniqueids=no
        overridemtu=1420
        nocrsend=yes
        nat_traversal=yes
        keep_alive=60
        crlcheckinterval=0
        strictcrlpolicy=no

conn %default
        rekeymargin=9m
        rekeyfuzz=100%
        keyingtries=0
        dpddelay=30
        dpdtimeout=120
        dpdaction=restart

conn l2tp_1
        leftcert="/etc/openswan/keys/server.crt"
        left="192.168.102.1"
        keyingtries="3"
        leftprotoport="17/1701"
        esp="3des-md5!"
        authby="rsasig"
        ikelifetime="28800"
        keyexchange="ike"
        leftrsasigkey="%cert"
        pfs="no"
        keylife="3600"
        rightid=""
        leftid="@kurama"
        rekey="no"
        right="0.0.0.0"
        auto="add"
        rightprotoport="17/%any"
        compress="no"
        ike="3des-sha-modp2048!"
        rightsubnetwithin="0.0.0.0/0"
        type="transport"
        rightrsasigkey="%cert"

conn l2tp_2
        leftcert="/etc/openswan/keys/server.crt"
        left="192.168.102.2"
        leftprotoport="17/0"
        keyingtries="3"
        esp="3des-md5!"
        authby="rsasig"
        ikelifetime="28800"
        keyexchange="ike"
        leftrsasigkey="%cert"
        pfs="no"
        keylife="3600"
        rightid=""
        leftid="@kurama"
        rekey="no"
        right="0.0.0.0"
        auto="add"
        rightprotoport="17/%any"
        compress="no"
        ike="3des-sha-modp2048!"
        type="transport"
        rightsubnetwithin="0.0.0.0/0"
        rightrsasigkey="%cert"