rendered paste bodyversion 2.0 # conforms to second version of ipsec.conf specification
include /etc/openswan/ipsec.d/examples/no_oe.conf
config setup
conn L2TP-CERT-CLIENT
authby=rsasig
pfs=no
rekey=yes
keyingtries=3
type=transport
left=%defaultroute
leftcert=/etc/openvpn/burai.crt
leftrsasigkey=%cert
leftprotoport=17/1701
right=216.135.78.71
rightcert=etc/openvpn/server.crt
rightrsasigkey=%cert
rightprotoport=17/1701
auto=ignore
Client
version 2.0
include /etc/ipsec.d/examples/no_oe.conf
config setup
plutodebug="none"
klipsdebug="none"
nat_traversal=no
# virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
nhelpers=0
conn L2TP-CERT-NAT
authby=rsasig
leftrsasigkey=%cert
leftcert=/etc/openvpn/burai.crt
pfs=no
auto=start
keyingtries=3
rekey=no
type=transport
left=192.168.102.1
rightcert=etc/openvpn/server.crt
rightrsasigkey=%cert
leftprotoport=17/1701
right=216.135.78.71
rightprotoport=17/1701