config setup
    strictcrlpolicy=no

conn %default
   ikelifetime=24h
   keylife=24h
   keyexchange=ikev2
   dpdaction=clear
   dpdtimeout=3600s
   dpddelay=3600s
   compress=yes
   rightdns=OUR_DNS

conn rw-android
   rekey=no
   leftsubnet=XXX.XXX.XXX.XXX/0
   leftid=vpnhost.domain.tld
   leftcert=vpnhost.domain.tld.pem
   right=%any
   rightsourceip=%itvpnpool
   rightca="C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Aristotle University of Thessaloniki Central CA R4"
   rightauth=pubkey
   rightsendcert=ifasked
   auto=add

conn rw-win7
   leftsubnet=0.0.0.0/0
   leftid=vpnhost.domain.tld
   leftcert=vpnhost.domain.tld.pem
   right=%any
   rightid=%any
   rightsourceip=%itvpnpool
   rightca="C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Aristotle University of Thessaloniki Central CA R4"
   rightsendcert=ifasked
   rightauth=eap-tls
   eap_identity=%identity
   auto=add