--- a/feeds/packages/net/strongswan/files/ipsec.conf
+++ b/feeds/packages/net/strongswan/files/ipsec.conf
@@ -0,0 +1,28 @@
+config 'ipsec'
+
+config 'remote' 'TEST'
+	option 'enabled' '1'
+	option 'gateway' '10.10.20.253'
+	option 'authentication_method' 'psk'
+	option 'pre_shared_key' '123456789'
+	list 'crypto_proposal' 'phase_1_settings'
+	list 'tunnel' 'TUNNEL'
+
+config 'crypto_proposal' 'phase_1_settings'
+	option 'encryption_algorithm' 'aes128'
+	option 'hash_algorithm' 'sha1'
+	option 'dh_group' 'modp768'
+
+config 'tunnel' 'TUNNEL'
+	option 'mode' 'add'
+	option 'local_subnet' '192.168.1.0/24'
+	option 'remote_subnet' '192.168.2.0/24'
+	option 'crypto_proposal' 'phase_2_settings'
+	option 'keyexchange' 'ikev2'
+	option 'ikelifetime' '10800'
+	option 'lifetime' '3600'
+
+config 'crypto_proposal' 'phase_2_settings'
+	option 'encryption_algorithm' 'aes128'
+	option 'hash_algorithm' 'sha1'
+	option 'dh_group' 'modp768'
--- a/feeds/packages/net/strongswan/Makefile
+++ b/feeds/packages/net/strongswan/Makefile
@@ -505,6 +505,8 @@
 	$(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
 	$(INSTALL_DIR) $(1)/etc/init.d
 	$(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_DATA) ./files/ipsec.conf $(1)/etc/config/ipsec
 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
 endef