conn client--east-l2tp-x509
	right=%any
	rightprotoport=17/%any
	rightsubnet=vhost:%priv
	rightrsasigkey=%cert
	left=192.1.2.23
	leftprotoport=17/1701
	leftrsasigkey=%cert
	leftid="/CN=srv2"
	leftcert=/etc/ipsec.d/certs/east.uml.freeswan.org.cert
	#leftupdown="/etc/ipsec.d/ccert/updown_srv"
	pfs=no
	rekey=no
	type=transport
	authby=rsasig
	auto=add