# /usr/local/strongswan/etc/ipsec.conf - Strongswan IPsec configuration file

config setup
	# setup items now go into strongswan.conf for version 5+

conn road-eastnet-ikev2
	left=%defaultroute
	leftid=@road
	#obsoleted option leftnexthop=192.1.2.23
	# Right security gateway, subnet behind it, next hop toward left.
	right=192.1.2.23
	rightid=@east
	#obsoleted option rightnexthop=192.1.2.45
	rightsubnet=192.0.2.0/24
	leftsubnet=192.1.3.209/32
	authby=secret
	keyexchange=ikev2
	auto=add

#strongswan cannot include this, due to incompatible options
#include	/testing/baseconfigs/all/etc/ipsec.d/ipsec.conf.common