# /usr/local/strongswan/etc/ipsec.conf - Strongswan IPsec configuration file

config setup
	# setup items now go into strongswan.conf for version 5+

conn roadnet-eastnet-ikev2
	left=192.1.3.209
	leftid=@road
	# Right security gateway, subnet behind it, next hop toward left.
	right=192.1.2.23
	rightid=@east
	leftsourceip=%config
	rightsubnet=0.0.0.0/0
	authby=secret
	keyexchange=ikev2
	auto=add
	esp=aes128-sha2_512
	ike=3des-md5-modp2048
	mobike=no

#strongswan cannot include this, due to incompatible options
#include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common
