version 2.0

# basic configuration
config setup
        dumpdir=/var/run/pluto/
        nat_traversal=yes
        virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v6:fd00::/8,%v6:fe80::/10
        oe=off
        protostack=netkey

conn %default
        keyingtries=%forever
        disablearrivalcheck=no

conn INS-Marchamos
        type=tunnel
        dpdaction=hold
        dpddelay=30
        dpdtimeout=120
        left=201.201.44.82
        leftnexthop=201.201.44.81
        leftsubnet=192.168.241.0/24
        leftsourceip=192.168.241.1
        right=201.193.44.3
        rightsubnet=172.17.3.32/28
        rightnexthop=%defaultroute
        leftid=201.201.44.82
        rightid=201.193.44.3
        authby=secret
        pfs=yes
        salifetime=8h
        ikelifetime=1h
        ike=aes256-sha1;modp1024!
        keyexchange=ike
        auto=start