v1

ipsec vpn

# conn for OE for network behind us.
# Uses would-be-implicit conn OEself.

include ../setup.default.new

conn OEnet
	leftsubnet=192.0.2.0/24	# behind east
	also=OEself

conn OEself
	left=%defaultroute
	leftrsasigkey=%dnsondemand
	right=%opportunistic
	rightrsasigkey=%dnsondemand
	keyingtries=3
	ikelifetime=1h
	keylife=1h
	rekey=no
	disablearrivalcheck=no	# change of default
	authby=rsasig	# change of default
	auto=route