diff --git a/HowtoIKED.md b/HowtoIKED.md
index 0fc67a74..b94f2118 100644
--- a/HowtoIKED.md
+++ b/HowtoIKED.md
@@ -64,9 +64,10 @@ remote_network="203.0.113.128/25"
 ikev2 active esp \
     from $local_network to $remote_network \
     local $local_ip peer $remote_ip \
-    ikesa auth hmac-sha2-256 enc aes-256 prf hmac-sha2-256 group modp4096 \
-    childsa auth hmac-sha1 enc aes-256 group modp4096 \
+    ikesa   auth hmac-sha2-256 enc aes-256 group modp4096 prf hmac-sha2-256 \
+    childsa auth hmac-sha1     enc aes-256 group modp4096 \
     ikelifetime 86400 lifetime 3600 \
+    srcid $local_ip dstid $remote_ip \
     psk "PSK-TO-CONFIGURE"
 ~~~