# /etc/ipsec.conf - Openswan IPsec configuration file
#
# Manual:     ipsec.conf.5
#
# Please place your own config files in /etc/ipsec.d/ ending in .conf

version	2.0	# conforms to second version of ipsec.conf specification

# basic configuration
config setup
	# Debug-logging controls:  "none" for (almost) none, "all" for lots.
	# klipsdebug=none
	# plutodebug="control parsing"
	# For Red Hat Enterprise Linux and Fedora, leave protostack=netkey
	protostack=netkey
	nat_traversal=no
	interfaces=%defaultroute
	oe=off
	# Enable this if you see "failed to find any available worker"
	#nhelpers=0
conn vpn
	forceencaps=yes
	type=tunnel
	authby=secret
	pfs=no
	ike=3des-md5
	leftid=8.8.8.8
	left=8.8.8.8
	leftsubnet=8.8.8.0/24
	leftnexthop=%defaultroute
	right=9.9.9.9
	rightsubnet=9.9.9.0/24
	rightnexthop=%defaultroute
	auto=start

#include /etc/ipsec.d/*.conf