<tkmconfig>
    <local_identity id="1">
        <identity>moon.strongswan.org</identity>
        <certificate>moonCert.pem</certificate>
    </local_identity>
    <policy id="1">
        <mode>transport</mode>
        <local>
            <identity_id>1</identity_id>
            <ip>192.168.0.1</ip>
        </local>
        <remote>
            <identity>sun.strongswan.org</identity>
            <ip>192.168.0.2</ip>
        </remote>
        <lifetime>
            <soft>30</soft>
            <hard>60</hard>
        </lifetime>
    </policy>
</tkmconfig>
