# /etc/ipsec.conf - Libreswan IPsec configuration file

version 2.0

config setup
	logfile=/tmp/pluto.log
	logtime=no
	logappend=no
	plutodebug="all"
	dumpdir=/tmp
	# allow multiple connections at once for the same client ID
	uniqueids=no

conn rw
	authby=rsasig
	rightid=@east.testing.libreswan.org
	right=192.1.2.23
	rightcert=east
	rightsubnet=192.0.2.0/24
	left=%any
	leftid=%fromcert
	leftmodecfgclient=yes
	leftaddresspool=100.64.0.1-100.64.0.10
	modecfgdns="1.2.3.4, 8.8.8.8"
	narrowing=yes