class strongswan { include strongswan::base if $use_shorewall { include shorewall::rules::ipsec } }