# /etc/ipsec.conf - FreeS/WAN IPsec configuration fil

# More elaborate and more varied sample configurations can be found
# in FreeS/WAN's doc/examples file, and in the HTML documentation.

version 2.0

# basic configuration
config setup
	#interfaces="ipsec0=eth1 ipsec1=eth1:1"
	#plutodebug="dns"
	uniqueids=yes
	dumpdir=/var/tmp/plutocore
	#plutostderrlog=/var/tmp/pluto.log
	nat_traversal=yes
	oe=yes

conn %default
	keylife=2h
	dpddelay=20
	dpdtimeout=120
	dpdaction=hold

conn navy--mrcharlie
        left=205.150.200.134
        leftsubnet=205.150.200.160/28
        leftnexthop=205.150.200.129
        leftid=@mrcharlie.sandelman.ca.
        # RSA 2192 bits   gimli   Tue Mar  9 20:29:21 2004
        leftrsasigkey=0sAQOrXJxB56Q28iOO43Va36elIFFKc/QB2orIeL94BdC5X4idFQZjSpsZTh48wKVXUE9xjwUkwR4R4/+1vjNN7KFp9fcqa2OxgjsoGqCn+3OPR8La9uyvZg0OBuSTj3qkbh/2HacAUJ7vqvjQ3W8Wj6sMXtTueR8NNcdSzJh149ch3zqfiXrxxna8+8UEDQaRR9KOPiSvXb2KjnuDan6hDKOT4qTZRRRCMWwnNQ9zPIMNbLBp0rNcZ+ZGFg2ckWtWh5yhv1iXYLV2vmd9DB6d4Dv8cW7scc3rPmDXpYR6APqPBRHlcbenfHCt+oCkEWse8OQhMM56KODIVQq3fejrfi1H
        right=%any
        rightid=@navy.e-dtu.sandelman.ca.
        rightsubnet=205.150.200.209/32
        rightsourceip=205.150.200.209
        # RSA 2192 bits   CVS   Mon Aug 23 23:27:18 2004
        rightrsasigkey=0sAQOltTQXeunEqEw9q8wEyxAxZPISLCto9b+y13nQUUOyyVCzMBF1IKNZtitMjskZJxbqiCws2jGd3B/2bnexB+3t+aeg4rQ6QhgULyETYxSwq5u45tO0g4PTani9onFujLecuMLnNo/RowVeziahMUzvviv5Og784QlnTtKuuBJHWMYifWqullWOZ2JGACl8DuCxhHMVJVkjyp9kkxMxThyK2BuSpDbh+uYLG8DPg3LvB6uH6LOAC9TCwXqdCyw7F6nyLuma8txMViai6aqErY5TmiLWsPUhYhqDXyqGthwvEDPG4CeJ0AuRux04UWARcJYC7CipXV5P+2cvCJ3W/yaJJVoNq+7ckr8KDQjJ7HQSHkvf
        auto=ignore

conn us-clear2
	leftsubnet=205.150.200.160/28
	also=IP1
	also=clear

conn mrcharlie--marajade
	also=mrcharlie-net-left
	also=marajade-host
	auto=add

conn mrcharlie--marajade-pass
	also=mrcharlie-net-left
	right=192.139.46.20
	type=passthrough
	auto=add

conn mrcharlie--indiagate
	also=mrcharlie-net-left
	right=indiagate.flora.ca
	rightid=@indiagate.flora.ca
	rightsubnet=192.168.168.0/24
	auto=add

conn us-private
	leftsubnet=205.150.200.160/28
	also=private

conn private
	also=IP1
        failureshunt=drop
        auto=add
        also=OE

conn us-private-or-clear
	leftsubnet=0.0.0.0/0
	also=IP1
        failureshunt=passthrough
        auto=route
        also=OE

conn private-or-clear
	also=IP1
        failureshunt=passthrough
        auto=route
        also=OE

conn clear-or-private
	auto=ignore

conn block
        auto=ignore

conn clear
	also=IP1
	authby=never
	type=passthrough
	right=%group
        auto=route

conn IP1
	left=205.150.200.134
	leftnexthop=205.150.200.129

conn pass-ns.xtdnet.nl
         type=passthrough
	 left=205.150.200.134
	 leftsubnet=193.110.157.2/32
	 leftnexthop=205.150.200.129
         right=%any
         rightsubnet=0.0.0.0/0
	 authby=never
         auto=ignore


conn packetdefault
	left=205.150.200.134
	leftnexthop=205.150.200.129
	leftsubnet=0.0.0.0/0
	auto=add
        right=%opportunistic
	also=OEparam

conn OE
        right=%opportunisticgroup
        also=OEparam

conn OEparam
        keyingtries=3
        keylife=1h
        rekey=no
	dpddelay=20
	dpdtimeout=120
	dpdaction=clear

conn ssw-oe-net
        leftsubnet=192.139.46.72/29
        also=ssw-gimli-base
        auto=ignore

conn ssw-oe-net2
        leftsubnet=205.150.200.160/28
        also=ssw-gimli-base
        auto=ignore


include /etc/ipsec.d/*.conn
include /etc/freeswan/freeswan-team-conns
include /etc/freeswan/mrcharlie-left.conf

#include /etc/ipsec.d/pbX/*.conn


