--- /dev/null
+version 2
+# If you put the preceding line in front of a 1.x ipsec.conf,
+# it should work within 2.x.
+
+
+# Merge the following sections with your existing config setup
+# and conn %default.
+# Allot these values to any you have not explictly defined.
+
+config setup
+ interfaces=%none # new default is %defaultroute
+ plutoload=%none # new default is %search
+ plutostart=%none # new default is %search
+
+conn %default
+ uniqueids=no # new default is yes
+ keyingtries=3 # new default is %forever
+ disablearrivalcheck=yes # new default is no
+ authby=secret # new default is rsasig
+ leftrsasigkey=%none # new default %dnsondemand
+ rightrsasigkey=%none # new default %dnsondemand
+