conn clear
	type=passthrough
	authby=never
	left=%defaultroute
	right=%group
	auto=ondemand

conn oe-base
	type=tunnel
	left=%defaultroute
	authby=null
	leftid=%null
	rightid=%null
	right=%opportunisticgroup

conn clear-or-private
	also=oe-base
	failureshunt=passthrough
	negotiationshunt=passthrough
	auto=add
	# responder will delete on fail - no special timing required

conn private-or-clear
	also=oe-base
	failureshunt=passthrough
	negotiationshunt=passthrough
	auto=ondemand
	keyingtries=1
	retransmit-timeout=2s

conn private
	also=oe-base
	failureshunt=drop
	negotiationshunt=drop
	auto=ondemand
	# infinite keyingtries - there is no try, only do
	keyingtries=0

conn block
	type=reject
	authby=never
	left=%defaultroute
	right=%group
	auto=ondemand

# conn packetdefault is no longer used