config setup charondebug="ike 1, knl 1, cfg 0" uniqueids=no conn %default auto=add compress=no type=tunnel keyexchange=ikev2 fragmentation=yes forceencaps=yes eap_identity=%identity dpdaction=clear dpddelay=300s rekey=no left=%any leftid=@{{ leftid }} leftcert=cert.pem leftsendcert=always leftsubnet={{ leftsubnet }} right=%any rightid=%any rightauth=eap-radius rightdns={{ rightdns }} rightsendcert=never {{ ipsec_groups }}