--- /dev/null
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
--- /dev/null
+
+hooks {
+ add_payload {
+ request = yes
+ id = 1
+ type = IDi
+ # ID_IPV4_ADDR | reserved[3] | 172.16.1.21
+ data = 0x01000000AC100115
+ replace = yes
+ }
+ rebuild_auth {
+ key = 172.16.1.20
+ }
+}
+certs {
+ untrusted {
+ x509-ls = 25.5.1/ls.crt
+ }
+}
+
+configs {
+ ike-v4 {
+ lid = 172.16.1.20
+ rid = 172.16.1.10
+ }
+}
+
+actions {
+ initiate {
+ config = child-v4
+ }
+}