# /etc/ipsec.conf - Libreswan IPsec configuration file

config setup
	logfile=/tmp/pluto.log
	logtime=no
	logappend=no
	plutodebug=all
	dumpdir=/tmp
	protostack=netkey

conn %default
	ikev2=no

conn road-east
	also=road
	also=road-eastnet-psk

conn east-road
	also=east
	also=road-eastnet-psk

conn east 
	left=%any
	xauthby=file
	retransmit-interval=2000
	retransmit-timeout=6s

conn road
	left=192.1.3.209
	retransmit-interval=2500
	retransmit-timeout=6s

conn road-eastnet-psk
	aggressive=yes
	authby=secret
	right=192.1.2.23
	rightid=@east
	leftmodecfgclient=yes
	leftxauthclient=yes
	leftsubnet=192.1.3.209/32
	rightxauthserver=yes
	rightmodecfgserver=yes
	modecfgpull=yes
	leftid=@roadrandom
	also=eastnet
	keyingtries=1

include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common