conn algovpn-10.99.0.10
    fragmentation=yes
    rekey=no
    dpdaction=clear
    keyexchange=ikev2
    compress=no
    dpddelay=35s

    ike=aes256gcm16-prfsha512-ecp384!
    esp=aes256gcm16-ecp384!

    right=10.99.0.10
    rightid=10.99.0.10
    rightsubnet=0.0.0.0/0
    rightauth=pubkey

    leftsourceip=%config
    leftauth=pubkey
    leftcert=testuser2.crt
    leftfirewall=yes
    left=%defaultroute

    auto=add