anchor.diff:      # init_limit_job_load = 0
   
       # Causes charon daemon to ignore IKE initiation requests.
  -    initiator_only = <%= scope.lookupvar('strongswan::charon::initiator_only') %>
  +    initiator_only = <%= @initiator_only %>
   
       # Install routes into a separate routing table for established IPsec
       # tunnels.
  
positive.code:         # Test crypto algorithms during registration (requires test vectors
          # provided by the test-vectors plugin).
          # on_add = no
          on_add = <%= scope.lookupvar('strongswan::charon::crypto_test_on_add') %>
  
          # Test crypto algorithms on each crypto primitive instantiation.
          # on_create = no
          on_create = <%= scope.lookupvar('strongswan::charon::crypto_test_on_create') %>
  
          # Strictly require at least one test vector to enable an algorithm.
          required = <%= scope.lookupvar('strongswan::charon::crypto_test_required') %>
  
          # Whether to test RNG with TRUE quality; requires a lot of entropy.
          #rng_true = no
  
negative.code:     # install_virtual_ip_on =
  
      # Check daemon, libstrongswan and plugin integrity at startup.
      integrity_test = <%= @integrity_test %>
  
      # A comma-separated list of network interfaces that should be ignored, if
      # interfaces_use is specified this option has no effect.
  