config ipsec
	option rtinstall_enabled '1'
	option make_before_break '0'