conn remote
     leftcert=selfCert.der
     leftsubnet=10.1.0.0/16
     rightsourceip=10.3.0.0/22
     rightid=*@example.org
     eap=gtc
     authby=rsasig
     keyexchange=ikev2
     auto=add