config setup
    # nat_traversal=yes
    charonstart=yes
    plutostart=no
    #charondebug="ike 4, knl 4, cfg 4, mgr 4, chd 4, net 4"

# /etc/ipsec.conf - strongSwan IPsec configuration file

conn %default
    ikelifetime=12h
    keylife=24h
    rekeymargin=3m
    keyingtries=%forever
    keyexchange=ikev1
    authby=secret

conn jdc
    #ike=aes128,aes128-sha-modp1536,3des-sha-modp1536
    #esp=md5,3des-md5,aes128-sha1,3des-sha1
    # The leftid parameter is not a real DNS name
    ike=3des-md5-modp1024
    esp=aes128-sha1
    pfs=no
    authby=psk
    leftid=X.X.X.X
    # The "left" parameter is the gateway's private IP
    left=10.10.10.10
    leftsubnet=10.100.200.21/32,10.10.0.0/16,10.20.0.0/16,10.30.0.0/16,10.110.0.0/16
    leftsourceip=10.100.200.21
    # The virtual IP pool is outside the VPC!
    #rightsourceip=10.100.255.0/28
    right=%any
    rightsourceip=10.100.200.22
    rightsubnet=10.100.200.22/32,192.100.80.0/22
    type=tunnel
    auto=route