version 2.0     # conforms to second version of ipsec.conf specification

config setup
        klipsdebug=none
        plutodebug=none

conn %default
        keyingtries=1

conn sample
        right=%any
        left=%defaultroute
        authby=secret
        auto=add
        keylife=24.0h
        rekey=no
        keyingtries=0

conn packetdefault
        auto=ignore

conn private-or-clear
        auto=ignore