config setup interfaces="ipsec0=eth0 ipsec1=eth1" klipsdebug=none plutodebug=none plutoload=%search plutostart=%search uniqueids=yes conn %default keyingtries=0 authby=rsasig conn denet-cn left=10.1.10.50 leftsubnet=192.168.10.0/24 leftnexthop=10.1.10.1 leftid=@de.exemplify.com leftrsasigkey=0sAQNv7EnikLXTl... right=10.126.5.241 rightnexthop=10.126.5.1 rightid=@cn.exemplify.com rightrsasigkey=0sAQN9oqZTrwju... auto=add For @cn.exemplify.com, you would have the following: config setup interfaces="ipsec0=eth0" klipsdebug=none plutodebug=none plutoload=%search plutostart=%search uniqueids=yes conn %default keyingtries=0 authby=rsasig conn denet-cn left=10.1.10.50 leftnexthop=10.1.10.1 leftsubnet=192.168.10.0/24 leftid=@de.exemplify.com leftrsasigkey=0sAQNv7EnikLXTl... right=10.126.5.241 rightnexthop=10.126.5.1 rightid=@cn.exemplify.com rightrsasigkey=0sAQN9oqZTrwju... auto=add