# /etc/ipsec.conf - Libreswan IPsec configuration file

config setup
	logfile=/tmp/pluto.log
	logtime=yes
	logappend=no
	plutodebug=all
	dumpdir=/tmp
	protostack=netkey

conn %default
	authby=secret
	mobike=yes
	esp=aes256-sha2

conn eastnet-any
	left=%any
	leftaddresspool=192.0.3.10-192.0.3.19
	rightsubnet=192.0.2.0/24
	right=192.1.2.23

conn road-eastnet
	right=192.1.2.23
	# left=%defaultroute would break during re-run of tests
	left=192.1.3.209
	rightsubnet=192.0.2.0/24
	narrowing=yes
	leftmodecfgclient=yes