version 2
# If you put this in front of a 1.x ipsec.conf, it should work 
# within 2.x.


# Merge this with your existing config setup.  Allot these values
# to any you have not explictly defined.

config setup
        interfaces=%none     # new default is %defaultroute
        plutoload=%none     # new default is %search
        plutostart=%none     # new default is %search

conn %default
        uniqueids=no     # new default is yes
        keyingtries=3     # new default is %forever
        disablearrivalcheck=yes     # new default is no
        authby=secret     # new default is rsasig
        leftrsasigkey=%none     # new default %dnsondemand
        rightrsasigkey=%none     # new default %dnsondemand