remove deprecated ipsec options

ipsec/ipsec.conf.dist

@@ -1,21 +1,14 @@
 version 2
-config setup
-    nat_traversal=yes
-    protostack=netkey
-    virtual_private=%v4:!LOCALIPMASK
-    force_keepalive=yes
-    keep_alive=60
 
 conn L2TP-PSK-NAT
     authby=secret
-    pfs=yes
     auto=add
     keyingtries=3
     rekey=no
     ikelifetime=8h
     keylife=1h
     ike=aes256-sha1,aes128-sha1,3des-sha1
-    phase2alg=aes256-sha1,aes128-sha1,3des-sha1
+    esp=aes256-sha1-modp2048
     keylife=1h
     type=transport
     left=PUBLICIP