text: connections {
  
     gw-gw {
        local_addrs  = 192.168.0.2
        remote_addrs = 192.168.0.1 
  
        local {
           auth = pubkey 
           pubkeys = sunPub.pem
           id = sun.strongswan.org
        }
        remote {
           auth = pubkey
           pubkeys = moonPub.pem
           id = moon.strongswan.org 
        }
        children {
           net-net {
              local_ts  = 10.2.0.0/16 
              remote_ts = 10.1.0.0/16 
  
              updown = /usr/local/libexec/ipsec/_updown iptables
              esp_proposals = aes128gcm128-ecp256
           }
        }
        version = 2
        mobike = no
        proposals = aes128-sha256-ecp256
     }
  }
  