connections {
        ipsec1 {
                remote_addrs = 192.168.3.1
                local_addrs = %any
                version = 1
                aggressive = no
                keyingtries = 3
                dpd_delay = 30
                dpd_timeout = 120
                rekey_time = 3600
                proposals = aes256-sha1-modp1536
                local_ipsec1 {
                        auth = psk
                        id = sun@strongswan.org
                }
                remote_ipsec1 {
                        auth = psk
                        id = moon@strongswan.org
                }
                children {
                        ipsec1 {
                                rekey_time = 3600
                                esp_proposals = aes256-sha1
                                local_ts = 192.168.5.0/24
                                remote_ts = 192.168.4.0/24
                                mark_in = 1
                                mark_out = 1
                        }
                }
        }
}

secrets {
        ike_local_ipsec1 {
                secret = geheim
                id_local_ipsec1 = sun@strongswan.org
        }
        ike_remote_ipsec1 {
                secret = geheim
                id_remote_ipsec1 = moon@strongswan.org
        }
}