version 2.0

config setup
	interfaces=%defaultroute
	nat_traversal=yes
	virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16
	klipsdebug=none
	plutodebug=none


conn %default
	keyingtries=1
	compress=yes
	disablearrivalcheck=no
	authby=rsasig
	leftrsasigkey=%cert
	rightrsasigkey=%cert

include /etc/openswan/ipsec.d/examples/no_oe.conf

conn roadwarrior
	left=%defaultroute
	leftcert=server.crt
	right=%any
	rightsubnet=vhost:%no,%priv
	auto=add