ipsec

17:03 root@firewall:/etc> more ipsec.conf
config setup
        interfaces="%defaultroute ipsec1=eth0 "
        klipsdebug="none"
        plutodebug="none"
        plutoload=%search
        plutostart=%search
        uniqueids=yes
        nat_traversal=yes
        virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v4:!192.168.168.0/255.255.255.0

conn %default
        keyingtries=0
        disablearrivalcheck=no

conn homeVPN
        left=24-176-81-057.dhcp.hckr.nc.charter.com
        leftnexthop=%defaultroute
        leftsubnet=192.168.168.0/255.255.255.0
        right=%any
        rightsubnet=vhost:%no,%priv
        ike=aes128-sha-modp1536,aes128-sha-modp1024,aes128-md5-modp1536,aes128-md5-modp1024,3des-sha-modp1536,3des-sha-modp1024,3des-md5-modp1536,3des-md5-mod
p1024
        esp=aes128-sha1,aes128-md5,3des-sha1,3des-md5
        ikelifetime=1h
        keylife=8h
        dpddelay=30
        dpdtimeout=120
        dpdaction=clear
        pfs=yes
        authby=secret
        auto=add