# /etc/ipsec.conf - FreeS/WAN IPsec configuration file

version	2.0	# conforms to second version of ipsec.conf specification

# basic configuration
config setup
	interfaces=%defaultroute
	klipsdebug=none
	plutodebug=none
	uniqueids=yes

conn test
	type tunnel
	compress=yes
	left=abc.dnsalias.net
	leftsubnet=172.29.18.0/24
	leftnexthop=%defaultroute
	right=xyz.dnsalias..net
	rightsubnet=192.168.10.0/24
	rightnexthop=%defaultroute
	keyexchange=ike
	esp=aes,3des
	keyingtries=5
	rekeymargin=4m
	auth=esp
	authby=secret
	pfs=yes
	auto=start

conn block
	auto=ignore

conn private
	auto=ignore

conn private-or-clear
	auto=ignore

conn clear-or-private
	auto=ignore

conn clear
	auto=ignore

conn packetdefault
	auto=ignore

conn private-or-clear
	auto=ignore

