connections {

  net-net {
    local_addrs  = PH_IP_SUN
    remote_addrs = PH_IP_MOON

    proposals = aes256-sha512-modp4096

    local {
      auth = pubkey
      certs = sunCert.pem
      id = sun.strongswan.org
    }
    remote {
      auth = pubkey
      id = moon.strongswan.org
    }
    children {
      net-net {
        local_ts = 10.2.0.0/16
        remote_ts = 10.1.0.0/16
        esp_proposals = aes256-sha512-modp4096
      }
    }
  }
}
