rendered paste body# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.15.2.6 2006/10/19 03:49:46 paul Exp $
# This file: /usr/local/share/doc/openswan/ipsec.conf-sample
#
# Manual: ipsec.conf.5
version 2.0 # conforms to second version of ipsec.conf specification
# basic configuration
config setup
interfaces=%defaultroute
# NAT-TRAVERSAL support, see README.NAT-Traversal
nat_traversal=yes
# Add connections here
conn %default
conn L2TP
left=10.10.136.94
leftprotoport=17/1701
leftnexthop=%defaultroute
right=10.10.136.45
rightprotoport=17/1701
rightnexthop=%defaultroute
authby=secret
also=l2tp
auto=start
conn one
left=10.10.136.96
leftsubnet=200.0.0.0/255.255.255.0
leftnexthop=%defaultroute
leftrsasigkey=0sAQNfeVs3yxTOzIkNs/0IXu4RJS9SV+NMpe6CJAP2Ui8h4tGpo9idmVMIfxe+W9fg9h/oGSowrE+OBdeAkQiyfMyD
leftid=@second
right=10.10.136.94
rightsubnet=192.168.1.0/255.255.255.0
rightrsasigkey=0sAQOg7ivVEM/HYxAEb9YQqYMiIzXuCihG7LQT8PODFJV6q1OEOpwEIAobcT1klp+WNz/NRFYGlOBXPzKVsTTztw8f
rightnexthop=%defaultroute
rightid=@first
authby=rsasig
also=dharmesh
auto=start
conn l2tp
keyexchange=ike
aggrmode=no
keyingtries=5
ike=3des-md5-modp1024
ikelifetime=5h
esp=3des-md5
compress=yes
keylife=5h
pfs=no
failureshunt=passthrough
conn dharmesh
keyexchange=ike
aggrmode=no
keyingtries=2
ike=3des-md5-modp768
ikelifetime=2h
esp=3des-md5
compress=yes
keylife=2h
pfs=yes
pfsgroup=modp768
failureshunt=passthrough
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf