# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.16 2005/07/26 12:29:45 ken Exp $

# This file:  /usr/local/share/doc/openswan/ipsec.conf-sample
#
# Manual:     ipsec.conf.5


version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        # plutodebug / klipsdebug = "all", "none" or a combation from below:
        # "raw crypt parsing emitting control klips pfkey natt x509 private"
        # eg:
        # plutodebug="control parsing"
        #
        # Only enable *debug=all if you are a developer
        #
        # NAT-TRAVERSAL support, see README.NAT-Traversal
        nat_traversal=no
        virtual_private=%v4:10.0.0.0/8,%4:172.16.0.0/12
        # OE is now off by default. Uncomment and change to on, to enable.
        #OE=off


# Add connections here

# sample VPN connection
# for more examples, see /etc/ipsec.d/examples/
conn net-to-net
                # Left security gateway, subnet behind it, nexthop toward right.
                left=145.94.76.158
                leftsubnet=192.168.3.0/24
                leftid=egbertpot.nl
                leftrsasigkey=0sAQNS6Oeu0ArJi
                leftnexthop=%defaultroute
                # Right security gateway, subnet behind it, nexthop toward left.
                right=89.220.148.165
                rightsubnet=192.168.2.0/24
                rightid=siddeburen.egbertpot.nl
                rightrsasigkey=0sAQOFioF9pjjJsmol3Sy0hmXMQ5Qn+
                rightnexthop=%defaultroute
                auto=add
                # To authorize this connection, but not actually start it,
                # at startup, uncomment this.
                #auto=start

# 'include' this file to disable Opportunistic Encryption.
# See /usr/local/share/doc/openswan/policygroups.html for details.
#
# RCSID $Id: no_oe.conf.in,v 1.2 2004-10-03 19:33:10 paul Exp $
conn block
    auto=ignore

conn private
    auto=ignore

conn private-or-clear
    auto=ignore

conn clear-or-private
    auto=ignore

conn clear
    auto=ignore

conn packetdefault
    auto=ignore