Something

version 2.0
include /etc/ipsec.d/examples/no_oe.conf
config setup
        plutodebug="none"
        klipsdebug="none"
        nat_traversal=no
        # virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
        nhelpers=0
conn L2TP-PSK-NAT
        rightsubnet=vhost:%priv
        also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
        authby=secret
        pfs=no
        auto=start
        keyingtries=3
        rekey=no
        type=transport
        left=%any
        leftsubnet=0.0.0.0/0
        leftprotoport=17/1701
        right=%any
        rightprotoport=17/%any