#conn base loaded
#conn aes128 loaded
#conn aes128-2 loaded

version 2.0

config setup
	plutodebug="crypt control klips"
	oe=no
	plutostderrlog=/var/tmp/pluto.log
	dumpdir=/var/tmp/plutocore


# begin conn base
conn base
	left=205.150.200.251
	leftnexthop=205.150.200.241
	right=205.150.200.134
	rightnexthop=205.150.200.241
	dpddelay=3
	dpdtimeout=12
	dpdaction=hold
	ike=aes128-sha1-modp4096
	auto=ignore
	type=tunnel
	compress=no
	pfs=yes
	rekey=yes
	authby=rsasig
	phase2=esp
# end conn base

# begin conn aes128
conn aes128
	#also = base 
	left=205.150.200.251
	leftnexthop=205.150.200.241
	right=205.150.200.134
	rightnexthop=205.150.200.241
	rightsubnet=205.150.200.165/32
	dpddelay=6
	dpdtimeout=120
	dpdaction=clear
	ike=aes128-sha1-modp4096
	phase2alg=aes128-sha1
	auto=ignore
	type=tunnel
	compress=no
	pfs=yes
	rekey=yes
	authby=rsasig
	phase2=esp
# end conn aes128

# begin conn aes128-2
conn aes128-2
	#also = base 
	left=205.150.200.251
	leftnexthop=205.150.200.241
	right=205.150.200.134
	rightnexthop=205.150.200.241
	rightsubnet=205.150.200.165/32
	dpddelay=3
	dpdtimeout=12
	dpdaction=hold
	ike=aes128-sha1-modp4096
	phase2alg=aes128-sha1
	auto=ignore
	type=tunnel
	compress=no
	pfs=yes
	rekey=yes
	authby=rsasig
	phase2=esp
# end conn aes128-2

# end of config