# This file is automatically generated. Do not edit
connections {
        bypass {
                remote_addrs = 127.0.0.1
                children {
                        bypass {
                                local_ts = 172.23.1.0/24
                                remote_ts = 172.23.1.0/24
                                mode = pass
                                start_action = trap
                        }
                }
        }
        con1000 {
                fragmentation = yes
                unique = replace
                version = 2
                proposals = aes256gcm128-modp8192
                dpd_delay = 5s
                dpd_timeout = 20s
                reauth_time = 25920s
                rekey_time = 0s
                over_time = 2880s
                encap = no
                mobike = no
                local_addrs = 172.23.5.254
                remote_addrs = xxx
                local {
                        id = fqdn:luphi
                        auth = psk
                }
                remote {
                        id = fqdn:dxclab
                        auth = psk
                }
                children {
                        con1000 {
                                dpd_action = restart
                                mode = tunnel
                                policies = yes
                                life_time = 3600
                                start_action = trap
                                remote_ts = xxx
                                local_ts = 172.23.0.0/19
                                esp_proposals = aes256gcm128-modp8192,aes256gcm96-modp8192,aes256gcm64-modp8192
                        }
                }
        }
        con2000 {
                fragmentation = yes
                unique = replace
                version = 2
                proposals = aes128gcm128-modp4096
                dpd_delay = 10s
                dpd_timeout = 60s
                reauth_time = 25920s
                rekey_time = 0s
                over_time = 2880s
                encap = no
                mobike = no
                local_addrs = 172.23.5.254
                remote_addrs = xxx
                local {
                        id = fqdn:xxx
                        auth = psk
                }
                remote {
                        id = fqdn: xxx
                        auth = psk
                }
                children {
                        con2000 {
                                dpd_action = restart
                                mode = tunnel
                                policies = yes
                                life_time = 3600
                                start_action = trap
                                remote_ts = 10.42.0.0/20,10.0.1.0/24
                                local_ts = 172.23.0.0/19,172.23.0.0/19
                                esp_proposals = aes128gcm128-modp4096
                        }
                }
        }
}