conn %default
	ikev2=insist
	pfs=yes
	ike=aes_gcm256-sha2_512+sha2_256-dh21+dh20+dh15+dh16+dh18,aes256-sha2_512+sha2_256-dh21+dh20+dh15+dh16+dh18
	esp=aes_gcm256,aes256-sha2_512+sha2_256
	authby=ecdsa-sha2_384,ecdsa-sha2_512,rsa-sha2_256,rsa-sha2_384,rsa-sha2_512
