Someone

version	2.0	# conforms to second version of ipsec.conf specification

include /etc/openswan/ipsec.d/examples/no_oe.conf

config setup
interfaces=%defaultroute
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16

conn %default
keyingtries=1
compress=yes
disablearrivalcheck=no
leftrsasigkey=%cert
rightrsasigkey=%cert

conn roadwarrior-net
leftsubnet=192.168.102.0/24
also=roadwarrior

conn roadwarrior-all
leftsubnet=rightsubnet=vhost:%no,%priv
also=roadwarrior

conn roadwarrior
leftcert=/etc/openvpn/burai.crt
right=%any
rightsubnet=vhost:%no,%priv
auto=add
pfs=yes

conn roadwarrior-l2tp
type=transport
leftcert=/etc/openvpn/burai.crt
leftprotoport=17/1701
right=%any
rightprotoport=17/1701
pfs=no
auto=add

conn block
auto=ignore

conn private
auto=ignore

conn private-or-clear
auto=ignore

conn clear-or-private
auto=ignore

conn clear
auto=ignore

conn packetdefault
auto=ignore