connections { home { local_addrs = 192.168.0.100 remote_addrs = 192.168.0.1 local { auth = eap eap_id = carol aaa_id = aaa.strongswan.org } remote { auth = pubkey id = moon.strongswan.org } children { home { remote_ts = 10.1.0.0/16 updown = /usr/local/libexec/ipsec/_updown iptables esp_proposals = aes128gcm16-modp3072 } } version = 2 proposals = aes128-sha256-modp3072 } } secrets { eap { id = carol secret = "Ar3etTnp" } }