conn clear
        type=passthrough
        authby=never
        left=%defaultroute
        right=%group
        auto=ondemand

conn oe-base-server
	# left
	left=%defaultroute
        leftrsasigkey=0sAQO9bJbr33iJs+13DaF/e+UWwsnkfZIKkJ1VQ7RiEwOFeuAme1QfygmTz/8lyQJMeMqU5T6s0fmo5bt/zCCE4CHJ8A3FRLrzSGRhWPYPYw3SZx5Zi+zzUDlx+znaEWS2Ys1f040uwVDtnG4iDDmnzmK1r4qADy5MBVyCx40pAi67I1/b8p61feIgcBpj845drEfwXCZOsdBCYFJKsHclzuCYK0P0x1kaZAGD6k7jGiqSuFWrY91LcEcp3Om0YL9DTViPZHOVcKw1ibLCnNRiwF9WX60b5d1Jk2r1I4Lt1OfV8VXyLaImpjZTL5T7mSJcR8xtgDCIljgM9fLtN9AJ1QePae+pmc5NGneeOcQ488VRUUjv
	leftmodecfgclient=yes
	leftcat=yes
	leftauth=rsasig
	# right
	rightid=%null
	right=%opportunisticgroup
	rightauth=null
	rightaddresspool=10.0.10.1-10.0.10.200
	narrowing=yes
	retransmit-interval=15000 # slow retransmits

conn clear-or-private
	also=oe-base-server
	failureshunt=passthrough
	negotiationshunt=passthrough
	auto=add

conn private-or-clear
	also=oe-base-server
	failureshunt=passthrough
	negotiationshunt=passthrough
	auto=ondemand

conn private
	also=oe-base-server
	failureshunt=drop
	negotiationshunt=drop
	auto=ondemand

conn block
        type=reject
        authby=never
        left=%defaultroute
        right=%group
        auto=ondemand