[General]
Listen-on=              192.35.XXX.YYY
Shared-SADB=            Defined
Policy-File=            policy

[Phase 1]
192.35.169.252=         ISAKMP-peer-A

[ISAKMP-peer-A]
Phase=                  1
Transport=              udp
Local-address=          192.35.XXX.YYY
Address=                192.35.169.252
Configuration=          Default-main-mode
Authentication=         what is your threat model?

[Phase 2]
Connections=            IPsec-to-A

[IPsec-to-A]
Phase=                  2
ISAKMP-peer=            ISAKMP-peer-A
Configuration=          Default-quick-mode
Remote-ID=              Net-any
Local-ID=               Net-me

[Net-any]
ID-type=                IPV4_ADDR_SUBNET
Network=                0.0.0.0
Netmask=                0.0.0.0

[Net-me]
ID-type=                IPV4_ADDR
Address=                192.35.169.ZZZ

[Default-main-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          ID_PROT
Transforms=             3DES-MD5,3DES-SHA

[Default-quick-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          QUICK_MODE
Suites=                 QM-ESP-3DES-SHA-PFS-SUITE,QM-ESP-3DES-MD5-PFS-SUITE