conn l2tp-psk-nat
	right=%any
	rightprotoport=17/%any
	rightsubnet=vhost:%priv
	rightrsasigkey=%cert
	left=192.1.2.23
	leftprotoport=17/1701
	leftrsasigkey=%cert
	#leftid="/CN=srv2"
	leftcert=/etc/ipsec.d/east/uebergangsca.cert
	#leftupdown="/etc/ipsec.d/ccert/updown_srv"
	pfs=no
	rekey=no
	type=transport
	authby=rsasig
	auto=add