conn %default
	ikev2=insist
	pfs=yes