conn %default
        left=%defaultroute
        leftcert="mycert.pem"
        leftrsasigkey=%cert
        authby=rsasig
        auth=esp
        pfs=yes
        rightrsasigkey=%cert
        compress=no
        keylife=1h
        ikelifetime=8h
        aggrmode=no
        dpddelay=30
        dpdtimeout=120
        dpdaction=clear