# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.15.2.6 2006/10/19 03:49:46 paul Exp $

# This file:  /usr/local/share/doc/openswan/ipsec.conf-sample
#
# Manual:     ipsec.conf.5


version 2.0     # conforms to second version of ipsec.conf specification


# basic configuration
config setup
        interfaces=%defaultroute
        # NAT-TRAVERSAL support, see README.NAT-Traversal
        nat_traversal=yes

# Add connections here

conn %default

conn L2TP
        left=10.10.136.94
        leftprotoport=17/1701
        leftnexthop=%defaultroute
        right=10.10.136.45
        rightprotoport=17/1701
        rightnexthop=%defaultroute
        authby=secret
        also=l2tp
        auto=start

conn one
        left=10.10.136.96
        leftsubnet=200.0.0.0/255.255.255.0
        leftnexthop=%defaultroute
        leftrsasigkey=0sAQNfeVs3yxTOzIkNs/0IXu4RJS9SV+NMpe6CJAP2Ui8h4tGpo9idmVMIfxe+W9fg9h/oGSowrE+OBdeAkQiyfMyD
        leftid=@second
        right=10.10.136.94
        rightsubnet=192.168.1.0/255.255.255.0
 rightrsasigkey=0sAQOg7ivVEM/HYxAEb9YQqYMiIzXuCihG7LQT8PODFJV6q1OEOpwEIAobcT1klp+WNz/NRFYGlOBXPzKVsTTztw8f
        rightnexthop=%defaultroute
        rightid=@first
        authby=rsasig
        also=dharmesh
        auto=start

conn l2tp
        keyexchange=ike
        aggrmode=no
        keyingtries=5
        ike=3des-md5-modp1024
        ikelifetime=5h
        esp=3des-md5
        compress=yes
        keylife=5h
        pfs=no
        failureshunt=passthrough

conn dharmesh
        keyexchange=ike
        aggrmode=no
        keyingtries=2
        ike=3des-md5-modp768
        ikelifetime=2h
        esp=3des-md5
        compress=yes
        keylife=2h
        pfs=yes
        pfsgroup=modp768
        failureshunt=passthrough


#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf