--- /dev/null
+# Generic roaming configurations
+conn roaming-ipv6
+ hostaddrfamily=ipv6
+ also=roaming-common
+
+ ipsec-interface=yes
+
+conn roaming-ipv4
+ hostaddrfamily=ipv4
+ also=roaming-common
+
+ # Required so that client is considered IPv6
+ leftsubnet=::0/0
+ ipsec-interface=yes
+ leftupdown="/usr/libexec/ipsec/_updown.host4client6"
+
+conn roaming-common
+ # Authorisation
+ authby=rsa-sha2
+ leftid=%fromcert
+ rightid=%fromcert
+ leftcert=ipa-client
+
+ # Networking
+ left=%defaultroute
+ clientaddrfamily=ipv6
+ leftmodecfgclient=yes