# /etc/ipsec.conf - Openswan IPsec configuration file
#
# Manual:     ipsec.conf.5
#
# Please place your own config files in /etc/ipsec.d/ ending in .conf

version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        # Debug-logging controls:  "none" for (almost) none, "all" for lots.
        # klipsdebug=none
        # plutodebug="control parsing"
        # nat_traversal=yes
        interfaces="ipsec0=eth0"
        klipsdebug=none
        plutodebug=none
        uniqueids=yes

conn %default
        keyingtries=0
        disablearrivalcheck=no
        authby=rsasig

conn pix
        keyingtries=0
        left=my_ip
        leftsubnet=192.168.1.0/24
        right=remote_ip
        rightid="xxx"
        rightsubnet=10.10.10.0/24
        authby=secret
        pfs=no
        auto=route
        ikelifetime=14400
        keylife=28800
        auth=esp
        esp=3des-sha1-96
        ike=3des-sha1-96

include /etc/ipsec.d/*.conf