charon {
  # VTI and BGP own forwarding. Do not install a table-220 default route for
  # the 0/0 route-based selectors; it would bypass the tunnel interfaces.
  install_routes = no
}