Hello! Please see the fedora packaging for examples: http://pkgs.fedoraproject.org/cgit/ipsec-tools.git/tree/
They use a racoon.service while the ipsec-tools init script equivalent (starting setkey) seems to be done via ifup/ifdown hooks instead. Regards, Andreas Henriksson
