conn rxpriv type=tunnel authby=secret negotiationshunt=hold failureshunt=passthrough keyingtries=1 ikev2=insist narrowing=yes auto=route # Send packets from eth1 local IP left=%eth1 # Send and receive packets from hosts in the policies dir right=%opportunisticgroup