
version 2.0     # conforms to second version of ipsec.conf specification



# basic configuration
config setup
	# THIS SETTING MUST BE CORRECT or almost nothing will work;
	# %defaultroute is okay for most simple cases.
	interfaces="ipsec0=eth1"
	nat_traversal=yes
	# Debug-logging controls:  "none" for (almost) none, "all" for lots.
	#klipsdebug=all
	plutodebug=none
	#plutodebug=all
	plutowait=no
	uniqueids=yes


# defaults for subsequent connection descriptions
conn %default
	# How persistent to be in (re)keying negotiations (0 means very).
	keyingtries=0
	authby=rsasig
	auto=add


conn RZN78L80_R1N10_DSL
	# RZNOF ist das Zentralgateway fuer den Tunnel
	leftid=@08002725BA4E.example.de
	leftcert=/etc/ipsec.d/MyCerts/08002725BA4E.cert.der
	left=192.168.3.80
	leftnexthop=192.168.3.79
	leftsubnet=10.11.0.0/24
	leftrsasigkey=%cert
	#rightid=@000149FFFF70.example.de
	right=%any
	rightsubnet=10.13.10.0/32
	rightrsasigkey=%cert
	Esp=aes-sha2_256



