conn clear
	type=passthrough
	authby=never
	left=%defaultroute
	right=%group
	auto=route

conn oe-base-server
	type=tunnel
	ikev2=insist
	also=slow-retransmits
        narrowing=yes
	# left
	left=%defaultroute
	leftid=%fromcert
        leftrsasigkey=%cert
        leftcert=east
	leftauth=rsasig
	leftaddresspool=10.0.10.1-10.0.10.200
        leftcat=yes
	# right
	rightid=%null
	right=%opportunisticgroup
	rightauth=null

conn clear-or-private
	also=oe-base-server
	failureshunt=passthrough
	negotiationshunt=passthrough
	auto=add

conn private-or-clear
	also=oe-base-server
	failureshunt=passthrough
	negotiationshunt=passthrough
	auto=route

conn private
	also=oe-base-server
	failureshunt=drop
	negotiationshunt=drop
	auto=route

conn block
	type=reject
	authby=never
	left=%defaultroute
	right=%group
	auto=route

# conn packetdefault is no longer used
