connections {
  remote-site {
    version = 2
    proposals = aes256-sha256-modp2048,aes256-sha1-modp1024
    reauth_time = 28800
    unique = replace

    local_addrs  = {{ local_addrs }}
    remote_addrs = {{ remote_addrs }}

    local {
      id = {{ local_id }}
      auth = psk
    }

    remote {
      id = @{{ remote_id }}
      auth = psk
    }

    children {
      site2site {
        mode = tunnel
        local_ts = {{ local_cidrs }}
        remote_ts = {{ remote_cidrs }}
        esp_proposals = aes256-sha256,aes256-sha1
        life_time = 3600
        dpd_action = restart
        start_action = start
        close_action = none
      }
    }

    rekey_time = 10800
    dpd_delay = 10
    dpd_timeout = 120
  }
}

secrets {
  ike-psk {
    id-1 = {{ local_id }}
    id-2 = @{{ remote_id }}
    secret = "{{ psk }}"
  }
}