kernel-libipsec {

    # Allow that the remote traffic selector equals the IKE peer.
    # allow_peer_ts = no

    # Firewall mark to set on outbound raw ESP packets.
    # fwmark = charon.plugins.socket-default.fwmark

    # Whether to load the plugin. Can also be an integer to increase the
    # priority of this plugin.
    load = no

    # Whether to send and receive ESP packets without UDP encapsulation if
    # supported on this platform and no NAT is detected.
    # raw_esp = no

}