
version	2.0	# conforms to second version of ipsec.conf specification

# basic configuration
config setup
	nat_traversal=no
	plutowait=yes
	nhelpers=2

# default settings for connections
conn %default
	# keyingtries default to %forever
	#keyingtries=3
	# Sig keys (default: %dnsondemand)
	leftrsasigkey=%cert
	rightrsasigkey=%cert
	# Lifetimes, defaults are 1h/8hrs
	#ikelifetime=20m
	#keylife=1h
	#rekeymargin=8m

# road warrior connection to meiron office netgear router
conn meiron-office
     right=xxx.xxx.xxx.xxx
     rightid=@office.com
     rightsubnet=10.128.205.0/24
     left=%defaultroute
     leftid=@openswan.com
     leftsubnet=10.10.11.0/24
     leftsourceip=10.10.11.1
     authby=secret
     aggrmode=yes
     ike="3des-sha1-modp1024"
     esp="3des-sha1"
     auto=add
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf

# For sample VPN connections, see /etc/ipsec.d/examples/
# Add connections here

