diff --git a/patches/systemvm/debian/vpn/etc/ipsec.conf b/patches/systemvm/debian/vpn/etc/ipsec.conf
new file mode 100644
index 00000000000..dc363b3a65f
--- /dev/null
+++ b/patches/systemvm/debian/vpn/etc/ipsec.conf
@@ -0,0 +1,9 @@
+# Manual:     ipsec.conf.5
+version	2.0	
+
+config setup
+	nat_traversal=yes
+	virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
+	protostack=auto
+	
+include /etc/ipsec.d/*.conf