conn test-net
	left=<some real, static ip>
	leftcert=certname.pem
	right=<another real, static ip>
	rightsubnet=192.168.0.0/24
	rightcert=cert2.pem
	auto=add
	pfs=yes