kernel-libipsec {

    # Allow that the remote traffic selector equals the IKE peer.
    # allow_peer_ts = no

    # Whether to load the plugin. Can also be an integer to increase the
    # priority of this plugin.
    load = yes

}