Basic pluto test: "westnet-eastnet": 192.0.1.0/24===192.1.2.45[@west]...192.1.2.23[@east]===192.0.2.0/24 the policy has been adjusted to permit only AES256 for phase 1 and AES CCM for phase 2.