# /etc/ipsec.conf - FreeS/WAN IPsec configuration file

# More elaborate and more varied sample configurations can be found
# in FreeS/WAN's doc/examples file, and in the HTML documentation.



# basic configuration
config setup
	interfaces=%defaultroute
	klipsdebug=none
	plutodebug=none
	plutoload=%search
	plutostart=%search
	uniqueids=yes

conn %default
	keyingtries=1
	compress=yes
	disablearrivalcheck=no
	auth=ah
	authby=rsasig
	leftrsasigkey=%cert
	rightrsasigkey=%cert

conn VPN-Gills-net
	leftsubnet=10.0.0.0/24
	right=%any
	also VPN-Gills

conn VPN-Gills
	right=%any
	left=%defaultroute
	leftcert=ns2.zionlth.org.pem
	auto=add
	pfs=yes