[General]
Retransmits=            5
Exchange-max-time=      120
Listen-on=              201.12.35.53

[Phase 1]
200.228.133.10=         openbsd-checkpoint

[openbsd-checkpoint]
Phase=                  1
Transport=              udp
Local-address=          201.12.35.53
Address=                200.228.133.10
Configuration=          Default-main-mode
Authentication=         secret

[Phase 2]
Connections=            sicredi-172.16.0.0/255.255.255.0

[sicredi-172.16.0.0/255.255.255.0]
Phase=                  2
ISAKMP-peer=            openbsd-checkpoint
Configuration=          Default-quick-mode
Local-ID=               centralnetwork-192.168.1.0/255.255.255.0
Remote-ID=              sicredinetwork-172.16.0.0/255.255.255.0

[centralnetwork-192.168.1.0/255.255.255.0]
ID-type=                IPV4_ADDR_SUBNET 
Network=                192.168.1.0    
Netmask=                255.255.255.0

[sicredinetwork-172.16.0.0/255.255.255.0]
ID-type=                IPV4_ADDR_SUBNET
Network=                172.16.0.0     
Netmask=                255.255.0.0

[Default-main-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          ID_PROT
Transforms=             3DES-SHA

[Default-quick-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          QUICK_MODE
Suites=                 QM-ESP-3DES-SHA-SUITE