# /etc/ipsec.conf - Libreswan IPsec configuration file

config setup
	logfile=/tmp/pluto.log
	logtime=no
	logappend=no
	plutodebug=all
	dumpdir=/tmp
	protostack=netkey

conn pool-eastnet-ikev2
        right=192.1.2.23
        rightid=%fromcert
        rightcert=east
        rightsubnet=0.0.0.0/0
        left=%any
        leftid=%fromcert
        leftaddresspool=192.0.2.100-192.0.2.200
        narrowing=yes
        leftmodecfgclient=yes
        leftca=%same


conn road
	leftcert=road
	left=%defaultroute
	also=base

conn north
	leftcert=north
	left=%defaultroute
	also=base

conn base
	right=192.1.2.23
	leftid=%fromcert
	rightid=%fromcert
	rightsubnet=0.0.0.0/0
	leftsubnet=0.0.0.0/0
	leftmodecfgclient=yes
	narrowing=yes
	leftsendcert=always

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common