Basic pluto with IKEv2 on the initiator (west), and on the responder. Use CKAIDs to identify the certificates.