connections {
  
    lan2_dc {
        remote_addrs = 1.1.1.254

        local {
            auth = psk
            id = lan2
        }
        remote {
            auth = psk
            id = dc
        }
        children {
            lan2_dc {
                local_ts = dynamic[gre]
                remote_ts = dynamic[gre]
		mode = transport

                rekey_time = 10m
                rekey_packets = 1000000000
                esp_proposals = aes256gcm16-ecp384
               
                dpd_action = trap
                start_action = trap
                replay_window = 128
                hw_offload = auto
            }
        }

        version = 2
        encap = yes
        mobike = no
        proposals = aes256gcm16-prfsha384-ecp384
        dpd_delay = 30s
        keyingtries = 0
        rekey_time = 60m
    }
}

secrets {
    ike-lan2_dc {
        id = dc
        secret = 0soBAJZLI7Bwwi61Rl113FqD/3
    }
}
