version 2
# If you put the preceding line in front of a 1.x ipsec.conf, 
# it should work within 2.x.


# Merge the following sections with your existing config setup
# and conn %default.
# Allot these values to any you have not explictly defined.

config setup
        interfaces=%none     # new default is %defaultroute
        plutoload=%none     # new default is %search
        plutostart=%none     # new default is %search

conn %default
        uniqueids=no     # new default is yes
        keyingtries=3     # new default is %forever
        disablearrivalcheck=yes     # new default is no
        authby=secret     # new default is rsasig
        leftrsasigkey=%none     # new default %dnsondemand
        rightrsasigkey=%none     # new default %dnsondemand