#
# Default Configuration File for FreeS/WAN IPSEC
#

version 2.0

config setup
        interfaces="ipsec0=eth1"
        klipsdebug=none
        plutodebug="none"
        dumpdir=
        manualstart=
        fragicmp=yes
        hidetos=yes
        uniqueids=no
        overridemtu=1420
        nocrsend=yes
        nat_traversal=yes
        keep_alive=60
        crlcheckinterval=0
        strictcrlpolicy=no

conn %default
        rekeymargin=9m
        rekeyfuzz=100%
        keyingtries=0
        dpddelay=30
        dpdtimeout=120
        dpdaction=restart

conn l2tp_1
        leftcert="/etc/openswan/ipsec.d/certs/server.crt"
        left=%any
        leftprotoport="17/1701"
        esp="3des-md5"
        authby="rsasig"
        ikelifetime="28800"
        leftrsasigkey="%cert"
        keylife="3600"
        right=%any
        auto="add"
        rightprotoport="17/%any"
        compress="no"
        ike="3des-sha1-modp2048"
        rightsubnet="vhost:%no,%priv"
        type="tunnel"
        rightrsasigkey="%cert"

conn l2tp_2
        leftcert="/etc/openswan/ipsec.d/certs/server.crt"
        leftprotoport="17/0"
        esp="3des-md5"
        authby="rsasig"
        ikelifetime="28800"
        leftrsasigkey="%cert"
        keylife="3600"
        right=%any
        auto="add"
        rightprotoport="17/%any"
        compress="no"
        ike="3des-sha1-modp2048"
        type="tunnel"
        rightsubnet="vhost:%no,%priv"
        rightrsasigkey="%cert"


# If you want to add additional ipsec tunnels by hand,
# please add them below here