[strongSwan] centos and config file locations

[Sashka]

Hi,

 I'm trying to configure strongswan on Centos 6.2. I've got latest rpm
from epel and have couple questions:
 1. All guides reference /etc/ipsec.d for location of certificates.
I've found no folder like this created after installation of rpm. Is
it still correct, or should I put them somewhere under
/etc/strongswan?
 2. which rules for iptable should I use to permit access to VPN? udp
50 and udp 500? anything else?

Thanks in advance.

-Sashaa