| config setup | |
| strictcrlpolicy=no | |
| conn initiator | |
| mobike=no | |
| auto=add | |
| type=tunnel | |
| keyexchange=ikev2 | |
| ike=aes256gcm16-prfsha256-modp2048! | |
| esp=aes256gcm16-esn! | |
| # local: | |
| leftauth=psk | |
| leftid=@sswan.vpn.example.com | |
| leftsubnet=192.168.5.0/24 | |
| # remote: (gateway) | |
| rightid=@roadwarrior.vpp | |
| right=192.168.10.2 | |
| rightauth=psk | |
| rightsubnet=192.168.3.0/24 | |