config setup
        interfaces=%defaultroute
        protostack=netkey
        klipsdebug=none
        plutodebug=none
        nat_traversal=yes
        nhelpers=0

conn test
        left=10.0.1.1
        leftnexthop=10.0.1.254
        leftsubnet=192.168.71.0/24
        right=10.0.2.1
        rightnexthop=10.0.2.254
        rightsubnet=192.168.1.0/24
        authby=secret
        auto=start
        rightupdown=/usr/libexec/ipsec/_updown.app
        leftupdown=/usr/libexec/ipsec/_updown.app
        auth=esp
        type=tunnel
        pfs=yes
        ike=3des-sha1,3des-md5
        phase2=esp
        phase2alg=3des-sha1,3des-md5
        rekey=no
        keylife=86400s

