# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	# put the logs in /tmp for the UMLs, so that we can operate
	# without syslogd, which seems to break on UMLs
	plutostderrlog=/tmp/pluto.log
	plutorestartoncrash=false
	dumpdir=/tmp
	protostack=netkey
        plutodebug="all"
	nat_traversal=yes

conn road-east-psk
        auto=add
        left=%defaultroute
        ike=3des-sha1
        aggrmode=yes
        authby=secret
        right=192.1.2.23
        rightid=@east
        rightnexthop=192.1.2.45
        leftsubnet=vhost:%priv,%no
        leftid=@roadrandom
        leftnexthop=192.1.3.254

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common

