ipsec.conf

# ipsec.conf - strongSwan IPsec configuration file

config setup
#       uniqueids=never

conn %default
        keyexchange=ikev2

# Add connections here.

conn ios8-cert
        leftsendcert=always
        left=192.168.1.70
        leftcert=serverCert-mscc.pem
#       leftauth=pubkey
        leftsubnet=0.0.0.0/0
        leftfirewall=yes
        #right=%any
        #rightid="*"
        rightsourceip=192.168.3.100/24
        auto=add
        ike=aes128-sha1-modp2048!
        esp=aes128-sha1!