3 # Configuration for one user with any type of IPsec/L2TP client
4 # including the updated Windows 2000/XP (MS KB Q818043), but
5 # excluding the non-updated Windows 2000/XP.
8 # Use a certificate. Disable Perfect Forward Secrecy.
15 leftcert=/etc/ipsec.d/ssl/localCERT.pem
23 rightcert=/etc/ipsec.d/ssl/userCERT.pem
24 rightprotoport=17/1701
26 # Change 'ignore' to 'add' to enable the configuration for this user.