connections {

    noc-ugw {
        #local_addrs = %defaultroute
        remote_addrs = aa.aa.34.126

        local {
            auth = pubkey
            certs = abcCert.pem
            id = abc
        }
        remote {
            auth = pubkey
            certs = noc-ugwCert.pem
            id = noc-ugw
        }
        children {
            noc {
                local_ts = 10.16.0.1
                # Specify remote VPN networks
                remote_ts = 192.168.37.0/24
                # start action trap ensures VPN is brought up upon demand.
                start_action = trap
            }
        }
        reauth_time = 14400
        rekey_time = 3600
    }
}
