FBM# cat /etc/ipsec.conf
config setup
  plutostart=yes
  plutodebug=none
  nat_traversal=no
  uniqueids=no
  charonstart=no
  charondebug="dmn 1, mgr 1, ike 0, chd 1, job 0, cfg 0, knl 0, net 0, enc -1, lib -1"

ca rootca0
  cacert=rootCaCert_0.pem

conn %default
  leftcert=/etc/ipsec.d/certs/btsCert.pem
  auto=start
  pfs=no
  forceencaps=no
  keyingtries=%forever
  mobike=no

conn conn6
  type=tunnel
  leftsubnet=40.40.40.6/24
  rightsubnet=40.40.40.101/24
  left=40.40.40.6
  right=40.40.40.101
  keyexchange=ikev1
  ike=aes128-sha1-modp1024,3des-sha1-modp1024!
  ikelifetime=83376s
  esp=aes128-sha1,3des-sha1!
  authby=pubkey
  rightid=%any
  keylife=86400s
  dpdaction=restart
  dpddelay=10s
  dpdtimeout=120s
  rekeyfuzz=50%
  rekeymargin=180s