Basic pluto with IKEv2 on the initiator (west) using PSK auth, and on the responder, using certificates for authentication.