root@turris:~# cat /etc/ipsec.conf
# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
	# strictcrlpolicy=yes
	uniqueids = no

conn ikev2-vpn
    auto=add
    compress=no
    type=tunnel
    keyexchange=ikev2
    fragmentation=yes
    forceencaps=yes

    left=%any
    leftid=domain.com
    leftcert=domain.com.cer
    leftsendcert=always
    leftsubnet=0.0.0.0/0

    right=%any
    rightid=%any
    rightauth=eap-mschapv2
    rightsourceip=%dhcp
    #rightdns=8.8.8.8
    rightdns=172.16.1.1
    rightsendcert=never

    eap_identity=%identity