#
# Default Configuration File for FreeS/WAN IPSEC
#

version 2.0


config setup
	interfaces=%defaultroute
	nat_traversal=yes
	virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16
	klipsdebug=none
	plutodebug=none


conn %default
	keyingtries=1
	compress=yes
	disablearrivalcheck=no
	authby=rsasig
	leftrsasigkey=%cert
	rightrsasigkey=%cert

include /etc/openswan/ipsec.d/examples/no_oe.conf

conn roadwarrior-l2tp
	pfs=no
	leftprotoport=17/0
	rightprotoport=17/1701
	also=roadwarrior

conn roadwarrior-l2tp-updatedwin
	pfs=no
	leftprotoport=17/1701
	rightprotoport=17/1701
	also=roadwarrior

#conn roadwarrior-net
# leftsubnet=0.0.0.0/0
# also=roadwarrior

conn roadwarrior
	left=%defaultroute
	leftcert=server.crt
	right=%any
	rightsubnet=vhost:%no,%priv
	auto=add