version 2
conn checkpoint-freeswan
        type=tunnel
        right=xxx.xxx.xxx.xxx
        left=xxx.xxx.xxx.xxx
        keyexchange=ike
        ike=3des-sha1
        auth=esp
        auto=start
        pfs=no
        authby=secret
conn net-checkpoint-net-freeswan
        type=tunnel
        right=xxx.xxx.xxx.xxx
        rightsubnet=xxx.xxx.xxx.xxx/24
        left=xxx.xxx.xxx.xxx
        leftsubnet=10.220.231.0/24
        auto=start
        auth=esp
        esp=3des-sha1
        pfs=no