gistfile1.txt

config setup
	# Раскомментируйте, если хотите несколько подключений на один логин
	# uniqueids=no	

conn %default
	dpdaction=clear
	dpddelay=35s
	dpdtimeout=300s

	fragmentation=yes
	rekey=no

	left=%any
	leftsubnet=0.0.0.0/0
	leftcert=fullchain
	leftfirewall=yes
	leftsendcert=always

	right=%any
	rightsourceip=192.168.103.0/24
	rightdns=8.8.8.8,8.8.4.4

	eap_identity=%identity

# IKEv2
conn IPSec-IKEv2
	keyexchange=ikev2
	auto=add

# BlackBerry, Windows, Android
conn IPSec-IKEv2-EAP
	also="IPSec-IKEv2"
	rightauth=eap-mschapv2

# macOS, iOS
conn IKEv2-MSCHAPv2-Apple
	also="IPSec-IKEv2"
	rightauth=eap-mschapv2
	leftid=vpn.krasovsky.me

# Android IPsec Hybrid RSA
conn IKEv1-Xauth
	keyexchange=ikev1
	rightauth=xauth
	auto=add