config setup
        # strictcrlpolicy=yes
        # uniqueids = no

conn %default
        ikelifetime=1440m
        keylife=60m
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev2
        authby=secret

conn ciscoios
        left=10.1.1.1
        leftsubnet=10.1.0.0/16
        leftid=10.1.1.1
        leftfirewall=yes
        right=444.444.444.444
        rightsubnet=192.168.0.0/16
        rightid=444.444.444.444
        auto=start
        ike=aes128-md5-modp1536
        esp=aes128-sha1