File openswan_31_config.dif of Package openswan

--- programs/_confread/ipsec.conf.in
+++ programs/_confread/ipsec.conf.in	2008/09/04 19:03:34
@@ -24,14 +24,23 @@ config setup
 	# NAT-TRAVERSAL support, see README.NAT-Traversal
 	nat_traversal=yes
 	# exclude networks used on server side by adding %v4:!a.b.c.0/24
-	virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%4:172.16.0.0/12
+	#virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%4:172.16.0.0/12
 	# OE is now off by default. Uncomment and change to on, to enable.
 	OE=off
 	# which IPsec stack to use. netkey,klips,mast,auto or none
 	protostack=netkey
-	
 
-# Add connections here
+# default settings for connections
+conn %default
+	# keyingtries default to %forever
+	#keyingtries=3
+	# Sig keys (default: %dnsondemand)
+	leftrsasigkey=%cert
+	rightrsasigkey=%cert
+	# Lifetimes, defaults are 1h/8hrs
+	#ikelifetime=20m
+	#keylife=1h
+	#rekeymargin=8m
 
 # sample VPN connection
 # for more examples, see /etc/ipsec.d/examples/
@@ -48,3 +57,7 @@ config setup
 #		# at startup, uncomment this.
 #		#auto=start
 
+#
+# Add connections here:
+#
+