conn.default.new

ipsec vpn

# V2 conn defaults that differ from V1

conn %default
	keyingtries=%forever	# 0 in boilerplate
	disablearrivalcheck=no	# already in boilerplate
	authby=rsasig	# already in boilerplate
	leftrsasigkey=%dnsondemand	# already in boilerplate
	rightrsasigkey=%dnsondemand	# already in boilerplate

# no lifetime, rekeystart, rekeytries