# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.16 2005/07/26 12:29:45 ken Exp $

# This file:  /usr/local/share/doc/openswan/ipsec.conf-sample
#
# Manual:     ipsec.conf.5


version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        # plutodebug / klipsdebug = "all", "none" or a combation from below:
        # "raw crypt parsing emitting control klips pfkey natt x509 private"
        # eg:
        # plutodebug="control parsing"
        #
        # Only enable *debug=all if you are a developer
        #
        # NAT-TRAVERSAL support, see README.NAT-Traversal
        nat_traversal=no
        virtual_private=%v4:10.0.0.0/8,%4:172.16.0.0/12
        # OE is now off by default. Uncomment and change to on, to enable.
        #OE=off


# Add connections here

# sample VPN connection
# for more examples, see /etc/ipsec.d/examples/
conn net-to-net
                # Left security gateway, subnet behind it, nexthop toward right.
                left=145.94.76.158
                leftsubnet=192.168.3.0/24
                leftid=egbertpot.nl
                leftrsasigkey=0sAQNS6Oeu0ArJiAVFv4SCfUJ0aDEm5Fdbcgx27ojKthnAdK/fvnNviteH5jqoqeNdgy/QlKXnSJvLPQz2/0SS5Z7ivVu/eTn2XOj8Clz3+MxBJgUjl08f3NmCB1FsHTeDqfK0Q4SDds4pIsjmaMTnWWD4J1OlKO9TT0sW0eIipaYzlaRbMlIQ6a2se6fkcGlqn1PpqwRICoOqSuOZ5OM1/1gk6Vw80sjVI+PAnbZAruGGE2K1Hk9yXo5JSmFIL0YqY3UyRy72reBRlEBSMh9YuDCjyvvMKf6f5E3Zb8Dazzqia859ZD2S9VuLsauCt/RWs5FB/2MxT4zZetnAnV5vXdCpTxS/D2LAq0q+WxdjxPYB5td/
                leftnexthop=%defaultroute
                # Right security gateway, subnet behind it, nexthop toward left.
                right=89.220.148.165
                rightsubnet=192.168.2.0/24
                rightid=siddeburen.egbertpot.nl
                rightrsasigkey=0sAQOFioF9pjjJsmol3Sy0hmXMQ5Qn+TSZZ00/FwpXRIF0YoFiDu2+R7qXr67Vup6S90VFSwH/MCcHFOFBrRJ88KpnM0XPovbjMWa+iutP1mQoIq7GUECaNCaxrDoAUctrRs1OrUTDomZv9Yh1VdXKhIexGeo8SuB3gbL7uKMxSkepulcBid2F0MGSeWK/52ZXzmXSRMHeifnl3HthvMx9E0C25v6fVRW3m2jvIDfhmdgHYiQ0Tr79SaS75T+ueJscfLiLUnuzr72l3avJ2/xqyZWLTNZ9ojL3Z6gbf7fRJWPwIn33qDWX1gL4+d/fxBG8cK7l5fERKhyCIS9TT69VbbtP3RiqxBeCK24xWwX9c77F86qz
                rightnexthop=%defaultroute
                auto=add
                # To authorize this connection, but not actually start it,
                # at startup, uncomment this.
                #auto=start

# 'include' this file to disable Opportunistic Encryption.
# See /usr/local/share/doc/openswan/policygroups.html for details.
#
# RCSID $Id: no_oe.conf.in,v 1.2 2004-10-03 19:33:10 paul Exp $
conn block
    auto=ignore

conn private
    auto=ignore

conn private-or-clear
    auto=ignore

conn clear-or-private
    auto=ignore

conn clear
    auto=ignore

conn packetdefault
    auto=ignore