conn roaming-host-ipv6
	also=roaming-host-common
	hostaddrfamily=ipv6

conn roaming-host-ipv4
	also=roaming-host-common
	hostaddrfamily=ipv4
	# Required so that client is considered IPv6:
	rightsubnet=::/0
	ipsec-interface=yes
	leftupdown="/usr/libexec/ipsec/_updown.host4client6"

conn roaming-host-common 
	also=roaming-host-domain
	# Authorisation
	authby=rsa-sha2
	leftid=%fromcert
	rightid=%fromcert
	# Networking
	clientaddrfamily=ipv6
	right=%any