conn b
	keyexchange=ikev1
	type=transport
	dpdaction=restart
	dpddelay=30s
	dpdtimeout=120s

	authby=pubkey
	ike=aes256-sha256-modp4096
	ikelifetime=28800s
	esp=aes128gcm16-modp4096
	lifetime=3600s

	left=1.1.1.1
	leftid=@a.example.org
	leftsigkey=a.example.org.pub
	leftsubnet=%dynamic[gre]

	right=2.2.2.2
	rightid=@b.example.org
	rightsigkey=b.example.org.pub
	rightsubnet=%dynamic[gre]
	auto=route