conn myvpn
        ikelifetime=60m
        keylife=20m
        rekeymargin=3m
        keyingtries=1
        keyexchange=ike
        ikev2=no
        type=tunnel
        authby=secret
        pfs=yes
        phase2=esp
        ike=aes128-sha1;dh2
        phase2alg=aes128-md5-modp1024
        auto=add
        left=10.0.0.81
        leftsubnet=10.0.0.0/24
        right=the.server.ip.addr