version	2.0	# conforms to second version of ipsec.conf specification
include /etc/openswan/ipsec.d/examples/no_oe.conf
config setup


conn L2TP-CERT-CLIENT
        authby=rsasig
        pfs=no
        rekey=yes
        keyingtries=3
        type=transport
        left=%defaultroute
        leftcert=/etc/openvpn/burai.crt
        leftrsasigkey=%cert
        leftprotoport=17/1701
        right=216.135.78.71
        rightcert=etc/openvpn/server.crt
        rightrsasigkey=%cert
        rightprotoport=17/1701
        auto=ignore

Client

version 2.0
include /etc/ipsec.d/examples/no_oe.conf
config setup
	plutodebug="none"
	klipsdebug="none"
	nat_traversal=no
	# virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
	nhelpers=0
conn L2TP-CERT-NAT
	authby=rsasig
	leftrsasigkey=%cert
	leftcert=/etc/openvpn/burai.crt
	pfs=no
	auto=start
	keyingtries=3
	rekey=no
	type=transport
	left=192.168.102.1
	rightcert=etc/openvpn/server.crt
	rightrsasigkey=%cert
	leftprotoport=17/1701
	right=216.135.78.71
	rightprotoport=17/1701