configure recommendation policy via strongswan.conf