[root] gelato:~# cat /etc/ipsec.conf
config setup
        #uncomment this line to view the debug
        #plutodebug="all"
        protostack=netkey
        oe=off
        nat_traversal=yes
        plutostderrlog=/var/log/pallinovpn.log

conn hq
        #left side is home
        left=104.219.53.186
        leftsubnet=10.23.149.0/24
        leftsourceip=10.23.149.5
        #right side is work
        right=50.34.23.214
        #rightsubnet=10.0.99.0/24
        #rightsubnet=10.0.88.0/24
        rightsubnets={10.0.199.0/24,10.0.99.0/24}
        authby=secret
        pfs=yes
        #ikelifetime=28800s
        ike=aes128-sha1-modp1536
        esp=aes128-sha1