ipsec.conf

# ipsec.conf
conn aws-to-gcp
  authby=psk
  auto=start
  dpdaction=hold
  esp=aes128-sha1-modp2048!  #Phase 2 Encryption algos
  forceencaps=yes
  ike=aes128-sha1-modp2048!
  keyexchange=ikev2
  mobike=no
  type=tunnel
  left=%any          #Host internal ip address
  leftid=3.1.79.233
  leftsubnet=172.31.0.0/16  #Host externa ip/Encryption domain
  leftauth=psk
  leftikeport=4500
  right=35.229.190.214        #Peer2 ip address
  rightid=35.229.190.214
  rightsubnet=10.0.0.0/24 #Peer2 accesible intranet
  rightauth=psk
  rightikeport=4500
  ikelifetime=28800
  lifetime=3600
  dpddelay=30
  dpdtimeout=120