# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	logfile=/tmp/pluto.log
	logtime=no
	logappend=no
	plutodebug=all
	dumpdir=/tmp
	protostack=netkey

conn pfs=yes-downgrade=yes
	also=west-east-base
	pfs=yes
	ms-dh-downgrade=yes
	authby=secret

conn westnet-eastnet-ikev2
	also=pfs=yes-downgrade=yes
	also=westnet
	also=eastnet

conn westnet-eastnet-ikev2-00
	also=pfs=yes-downgrade=yes
	rightsubnet=192.0.200.0/24
	leftsubnet=192.0.100.0/24

conn westnet-eastnet-ikev2-01
	also=pfs=yes-downgrade=yes
	rightsubnet=192.0.201.0/24
	leftsubnet=192.0.101.0/24

conn westnet-eastnet-ikev2-10
	also=pfs=yes-downgrade=yes
	rightsubnet=192.0.210.0/24
	leftsubnet=192.0.110.0/24

conn westnet-eastnet-ikev2-11
	also=pfs=yes-downgrade=yes
	rightsubnet=192.0.211.0/24
	leftsubnet=192.0.111.0/24

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common