version	2.0	# conforms to second version of ipsec.conf specification
config setup
	dumpdir=/var/run/pluto/
	nat_traversal=yes
	virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v6:fd00::/8,%v6:fe80::/10
	oe=off
	protostack=netkey
	plutostderrlog=/var/log/pluto.log


conn net1
	# connection
	authby=secret
	auto=start
	keylife=8h


	# phase 1 IKA
	#ike=3des-sha1;modp1028
	ike=3des-sha1

	# phase 2

	type=tunnel
	phase2=esp
	#phase2alg=3des-sha1;modp1028
	phase2alg=3des-sha1
	#psf=yes


	#keyexchange=ike
#	esp=3des-sha1


	# Linux openswan
	left=yyy.yyy.27.141
	leftsubnet=192.168.210.0/24
	#leftnexthop=yyy.yyy.27.137
	leftnexthop=%defaultroute
	# juniper ISG 2000 at net1 networks
	right=zzz.zzz.2.74
	rightsubnet=10.41.35.0/24
#	rightnexthop=%defaultroute