[root@fedoravm xl2tpd]# cat /etc/ipsec.conf
version 2.0

config setup
        nat_traversal=yes
        nhelpers=0
        protostack=netkey
        virtual_private=%v4:10.0.0.0/8,%v4:192.168.1.0/24,%v4:172.16.0.0/12
        oe=off

#include /etc/ipsec/ipsec.d/examples/no_oe.conf

conn L2TP-PSK-NAT
        rightsubnet=vhost:%priv
        also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
        authby=secret
        pfs=no
        auto=add
        keyingtries=3
        rekey=no
        ikelifetime=8h
        keylife=1h
        type=transport
        left=192.168.1.11
        leftprotoport=17/1701
        right=%any
        rightprotoport=17/0