# /etc/ipsec.conf - Openswan IPsec configuration file
version 2.0
config setup
dumpdir=/var/run/pluto/
nat_traversal=yes
virtual_private=%v4:10.0.0.0/24,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v6:fd00::/8,%v6:fe80::/10,%v4:!198.168.2.0/24
oe=off
protostack=netkey
uniqueids=yes
interfaces=�faultroute

conn �fault
 forceencaps=yes
 compress=yes
conn l2tp-psk-nat
 rightsubnet=vhost:%priv
 also=l2tp-psk-nonat
conn l2tp-psk-nonat
  authby=secret
  aggrmode=yes 
  pfs=no
  auto=add
  keyingtries=1
  rekey=no
  keyexchange=ike
  ikelifetime=8h
  keylife=1h
  type=transport
  left=my_prov_ip
  leftsubnet=198.168.2.0/24
  leftprotoport=17/1701
  leftnexthop=�faultroute
  right=%any
  rightprotoport=17/%any
  rightnexthop=�faultroute
  dpddelay=40
  dpdtimeout=130
  dpdaction=clear