conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	mobike=no

conn drop-rest
	leftsubnet=192.168.1.6
	rightsubnet=192.168.1.8
	leftfirewall=yes
	type=passthrough
    auto=route

conn telnet-drop
	leftsubnet=192.168.1.6[6/%any]
	rightsubnet=192.168.1.8[6/23]
	leftfirewall=yes
	authby=never
	type=drop
	auto=route

conn allow-9100
	leftsubnet=192.168.1.6[6/%any]
	rightsubnet=192.168.1.8[6/9100]
	leftfirewall=yes
	type=allow
    auto=route


