http://gpp6nwvsps43b3mfacsh433uroo6uyjvvpr6tgj4jh4n5ngxt7rqbvid.onion/posts/ikev2-strongswan.html
Also replace any other values as you wish, for example the virtual IP address pool or the DNS servers. connections {
ikev2-pubkey {
version = 2
proposals = aes192gcm16-aes128gcm16-prfsha256-ecp256-ecp521,aes192-sha256-modp3072,default
rekey_time = 0s
pools = primary-pool-ipv4,primary-pool-ipv6
fragmentation = yes
dpd_delay = 30s
local {
certs = yy.yy.yy.yy.pem
id = yy.yy.yy.yy
}
remote {
}
children {
ikev2-pubkey-child {
...