CIPHER="AES128-GCM128 AES128-CBC"
COMPRESSION="off"
GROUP_TYPE="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
INTEGRITY="SHA256"
KEY_EXCHANGE="ikev2"
LIFETIME="28800"
PFS="on"
