Listing 2. /etc/ipsec.conf on Gateway

config setup
        interfaces="ipsec0=eth1"
        # [snip]
        forwardcontrol=yes

conn george-gracie
        authby=rsasig
        left=10.0.54.2
        leftid=@george.wiremonkeys.org
        leftsubnet=0.0.0.0/0
        leftrsasigkey=0s0sAQPF0JJvY7xK9Cmx1... [ rest of key omitted ]
        right=%any
        rightid=@gracie.wiremonkeys.org
        rightrsasigkey=0sNU0q2Y0Y0jxAIKuutV3... [ rest of key omitted ]
        auto=add