### UIS VPN defaults
conn %default
  keyexchange=ikev2
  ikelifetime=60m
  keylife=20m
  rekeymargin=3m
  keyingtries=1

### University VPN service
conn CAM
  left=%any
  leftid="username@cam.ac.uk"
  leftauth=eap
  leftsourceip=%config
  leftfirewall=yes
#
  right="vpn.uis.cam.ac.uk"
  rightid="CN=vpn.uis.cam.ac.uk"
  rightcert=/etc/ipsec.d/certs/vpn-server-cert.crt
  rightsubnet=0.0.0.0/0
#
  auto=add

### The IoA Managed VPN service
conn IOA
  left=%any
  leftid="username@cam.ac.uk"
  leftauth=eap
  leftsourceip=%config
  leftfirewall=yes
#
  right="vpn.ast.cam.ac.uk"
  rightid="CN=vpn.ast.cam.ac.uk"
  rightcert=/etc/ipsec.d/certs/ast-vpn.crt
  rightsubnet=0.0.0.0/0
#
  auto=add