# Generic roaming configurations
conn roaming-ipv6
	hostaddrfamily=ipv6
	also=roaming-common

	ipsec-interface=yes

conn roaming-ipv4
	hostaddrfamily=ipv4
	also=roaming-common

	# Required so that client is considered IPv6
	leftsubnet=::0/0
	ipsec-interface=yes
	leftupdown="/usr/libexec/ipsec/_updown.host4client6"

conn roaming-common
	# Authorisation
	authby=rsa-sha2
	leftid=%fromcert
	rightid=%fromcert
	leftcert=ipa-client

	# Networking
	left=%defaultroute
	clientaddrfamily=ipv6
	leftmodecfgclient=yes