diff --git a/templates/ipsec.conf.wit b/templates/ipsec.conf.wit
index 4daacf0..70de46e 100644
--- a/templates/ipsec.conf.wit
+++ b/templates/ipsec.conf.wit
@@ -23,7 +23,7 @@ conn %default
     leftcert = FQHOSTNAME.crt
     leftid = "C=US, O=Wit, CN=FQHOSTNAME"
     rightid = "C=US, O=Wit, CN=*"
-    rightid2 = "C=US, O=Wit, OU=DCs, OU=PhyNodes, CN=*"
+    rightid2 = "C=US, O=Wit, OU=DCs, OU=PhyNodes, OU=ipsec, CN=*"
     auto = route