conn dhatch-d4b
	keyexchange = ikev2
	dpdaction = clear
	dpddelay = 300s
	left = %defaultroute
	leftauth = pubkey
	leftid = @vpn.pyrocufflink.net
	leftcert = vpn.pyrocufflink.net.cer
	leftsubnet = 172.31.0.0/27
	leftfirewall = yes
	right = %any
	rightauth = pubkey
	rightid = "C=US, O=Dustin C. Hatch, CN=dhatch-d4b.securepassage.com"
	rightsubnet = 0.0.0.0/0
	auto = add

conn remote-access
	keyexchange = ikev2
	dpdaction = clear
	dpddelay = 300s
	left = %defaultroute
	leftid = @vpn.pyrocufflink.net
	leftcert = vpn.pyrocufflink.net.cer
	leftsubnet = 0.0.0.0/0
	right = %any
	rightsourceip = 172.31.0.64/28
	rightauth = pubkey
	rightdns = 172.30.0.4
	auto = add