rendered paste body#
# Default Configuration File for FreeS/WAN IPSEC
#
version 2.0
config setup
interfaces=%defaultroute
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16
klipsdebug=none
plutodebug=none
conn %default
keyingtries=1
compress=yes
disablearrivalcheck=no
authby=rsasig
leftrsasigkey=%cert
rightrsasigkey=%cert
include /etc/openswan/ipsec.d/examples/no_oe.conf
conn roadwarrior-l2tp
pfs=no
leftprotoport=17/0
rightprotoport=17/1701
also=roadwarrior
conn roadwarrior-l2tp-updatedwin
pfs=no
leftprotoport=17/1701
rightprotoport=17/1701
also=roadwarrior
#conn roadwarrior-net
# leftsubnet=0.0.0.0/0
# also=roadwarrior
conn roadwarrior
left=%defaultroute
leftcert=server.crt
right=%any
rightsubnet=vhost:%no,%priv
auto=add