serverside:

conn roadwarriors
    left=10.154.0.2
    leftid="/C=CA/ST=ON/L=Ottawa/O=Infoman Inc./OU=IT/CN=vpn.infoman.ca/emailAddress=orospakr@infoman.ca"
    leftcert=/etc/ipsec.d/certs/vpn.infoman.ca.pem
    leftrsasigkey=%cert
    rightrsasigkey=%cert
    right=%any
    rightid="/C=CA/ST=ON/L=Ottawa/O=Infoman Inc./OU=IT/CN=Andrew Clunis/emailAddress=orospakr@infoman.ca"
    auto=add

clientside:

conn road
    left=10.154.0.2
    leftsubnet=0.0.0.0/0
    leftrsasigkey=%cert
    right=%defaultroute
    rightid="/C=CA/ST=ON/L=Ottawa/O=Infoman Inc./OU=IT/CN=Andrew Clunis/emailAddress=orospakr@infoman.ca"
    rightcert=/etc/ipsec.d/certs/orospakr.pem
    rightrsasigkey=%cert
    rightsubnet=10.153.0.0/16
    rightsourceip=10.153.0.2
    auto=add