# /etc/ipsec.conf

config setup
	protostack=netkey
	oe=off

conn bad-nexthop
	left=1.2.3.4
	right=5.6.7.8
	# next line has no EOL
	auto=add