列表 2. /etc/ipsec.conf 中的隧道默认设置

# defaults for subsequent connection descriptions
conn %default
      keyingtries=0
      disablearrivalcheck=no
      authby=rsasig