From 11b4d1997fd134c28efb62bd71d4df4a44d70041 Mon Sep 17 00:00:00 2001
From: bedefaced <thisisnewlife@mail.ru>
Date: Fri, 21 Apr 2017 13:57:27 +0300
Subject: [PATCH] remove deprecated ipsec options

---
 ipsec/ipsec.conf.dist | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/ipsec/ipsec.conf.dist b/ipsec/ipsec.conf.dist
index e1e768f..25fc480 100644
--- a/ipsec/ipsec.conf.dist
+++ b/ipsec/ipsec.conf.dist
@@ -1,21 +1,14 @@
 version 2
-config setup
-    nat_traversal=yes
-    protostack=netkey
-    virtual_private=%v4:!LOCALIPMASK
-    force_keepalive=yes
-    keep_alive=60
 
 conn L2TP-PSK-NAT
     authby=secret
-    pfs=yes
     auto=add
     keyingtries=3
     rekey=no
     ikelifetime=8h
     keylife=1h
     ike=aes256-sha1,aes128-sha1,3des-sha1
-    phase2alg=aes256-sha1,aes128-sha1,3des-sha1
+    esp=aes256-sha1-modp2048
     keylife=1h
     type=transport
     left=PUBLICIP