#sectiune din /etc/ipsec.conf
conn numele_conexiunii
        aggrmode=yes
        type=tunnel
        auth=esp
        authby=secret
        left=ip.real.din.ferma
        leftsubnet=192.168.0.0/21
        leftnexthop=ip.real.gateway.ferma
        right=ip.real.capatul.lor
        rightsubnet=172.16.0.0/21
        rightnexthop=ip.real.gateway.la_ei
        esp=3des-md5
        ike=3des-md5
        keyexchange=ike
        pfs=no
        auto=start