# /etc/ipsec.connections - connection definitions 

conn %default
        ikelifetime=60m
        keylife=20m
        rekeymargin=3m
        keyingtries=1

include /etc/ipsec.host

include /etc/ipsec.peers/*