conn State-Secrets
    type=tunnel
    authby=secret
    auto=start
    pfs=no
    ike=aes256-sha1;modp1024
    phase2alg=aes256-sha1;modp1024
    aggrmode=no
    left=12.0.0.1
    right=12.0.0.2
    leftsubnet=11.0.0.0/24
    rightsubnet=12.0.0.0/24