conn client--east-l2tp-x509
        right=%any
        rightprotoport=17/%any
        rightsubnet=vhost:%priv
        rightrsasigkey=%cert
        left=192.1.2.23
        leftprotoport=17/1701
        leftrsasigkey=%cert
        leftid="/CN=srv2"
        leftcert=/etc/ipsec.d/certs/east.uml.freeswan.org.cert
        #leftupdown="/etc/ipsec.d/ccert/updown_srv"
        pfs=no
        rekey=no
        type=transport
        authby=rsasig
        auto=add



