```
conn vpn.example.com
        left=%br-ex
        leftcert=testsno.example.com
        leftid=%fromcert
        leftrsasigkey=%cert
        leftsubnet=0.0.0.0/0
        leftmodecfgclient=yes
        right=vpn.example.com
        rightsubnet=172.16.0.0/16
        rightid=@vpn.example.com
        rightrsasigkey=%cert
        ikev2=insist
        auto=start
```