version 2.0 include /etc/ipsec.d/examples/no_oe.conf config setup plutodebug="none" klipsdebug="none" nat_traversal=no # virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12 nhelpers=0 conn L2TP-PSK-NAT rightsubnet=vhost:%priv also=L2TP-PSK-noNAT conn L2TP-PSK-noNAT authby=secret pfs=no auto=start keyingtries=3 rekey=no type=transport left=%any leftsubnet=0.0.0.0/0 leftprotoport=17/1701 right=%any rightprotoport=17/%any