conn %default
	ikev2=insist
	pfs=yes
	ike=aes_gcm256-sha2_256;dh19,aes_gcm256-sha2_512;dh19,aes256-sha1;dh19,aes256-sha2_512;dh19,aes128-sha2_256;dh19,aes128-sha1;dh19,aes_gcm256-sha2_256;dh20,aes_gcm256-sha2_512;dh20,aes256-sha1;dh20,aes256-sha2_512;dh20,aes128-sha2_256;dh20,aes128-sha1;dh20,aes_gcm256-sha2_256;dh21,aes_gcm256-sha2_512;dh21,aes256-sha1;dh21,aes256-sha2_512;dh21,aes128-sha2_256;dh21,aes128-sha1;dh21,aes_gcm256-sha2_256;dh14,aes_gcm256-sha2_512;dh14,aes256-sha1;dh14,aes256-sha2_512;dh14,aes128-sha2_256;dh14,aes128-sha1;dh14,aes_gcm256-sha2_256;dh15,aes_gcm256-sha2_512;dh15,aes256-sha1;dh15,aes256-sha2_512;dh15,aes128-sha2_256;dh15,aes128-sha1;dh15,aes_gcm256-sha2_256;dh16,aes_gcm256-sha2_512;dh16,aes256-sha1;dh16,aes256-sha2_512;dh16,aes128-sha2_256;dh16,aes128-sha1;dh16,aes_gcm256-sha2_256;dh18,aes_gcm256-sha2_512;dh18,aes256-sha1;dh18,aes256-sha2_512;dh18,aes128-sha2_256;dh18,aes128-sha1;dh18
	esp=aes_gcm256-sha2_256,aes_gcm256-sha2_512,aes256-sha1,aes256-sha2_512,aes128-sha2_256,aes128-sha1
