Listing 2. /etc/ipsec.conf on Gateway

(As in Listing 1, leftrsasigkey and rightrsasigkey are truncated.)

config setup
    interfaces="ipsec0=eth1"
    # [snip]
    forwardcontrol=yes

conn george-gracie
    authby=rsasig
    left=10.0.54.2
    leftid=@george.wiremonkeys.org
    leftsubnet=0.0.0.0/0
    leftrsasigkey=0s0sAQPF0JJvY7xK9Cmx1...
    right=%any
    rightid=@gracie.wiremonkeys.org
    rightrsasigkey=0sNU0q2Y0Y0jxAIKuutV3...
    auto=add