connections {

  net-net {
    local_addrs  = 192.168.0.2
    remote_addrs = 192.168.0.1

    proposals = aes256-sha512-modp4096

    local {
      auth = pubkey
      certs = sunCert.pem
      id = sun.strongswan.org
    }
    remote {
      auth = pubkey
      id = moon.strongswan.org
    }
    children {
      net-net {
        local_ts = 10.2.0.0/16
        remote_ts = 10.1.0.0/16
        esp_proposals = aes256-sha512-modp4096
      }
    }
  }
}
