Use DNSSEC resolver (requires net-dns/unbound) Enable the IKEv1 protocol libreswan/libreswan