{
    my $ipsecDB = esmith::ConfigDB->open('ipsec_connections')
        or die("cant connect to ipsec database");
    my @connections = $ipsecDB->keys;

    foreach my $conn (@connections) {

        # Remove ipsecversion
        my $ipsecversion = $ipsecDB->get_prop( $conn, 'ipsecversion' );
        $ipsecDB->get_prop_and_delete( $conn, 'ipsecversion' ) if ( defined $ipsecversion );

        # Set keyexchange
        my $keyexchange = $ipsecDB->get_prop( $conn, 'keyexchange' );
        $ipsecDB->set_prop( $conn, 'keyexchange', 'ikev2' ) if ( !defined $keyexchange );

        # Remove dpdaction=restart
        my $dpdaction = $ipsecDB->get_prop( $conn, 'dpdaction' );
        $ipsecDB->get_prop_and_delete( $conn, 'dpdaction' ) if ( defined $dpdaction );

        # remove keyringtries
        my $keyringtries = $ipsecDB->get_prop( $conn, 'keyringtries' );
        $ipsecDB->get_prop_and_delete( $conn, 'keyringtries' ) if ( defined $keyringtries );

        # remove IKE
        my $ike = $ipsecDB->get_prop( $conn, 'ike' );
        $ipsecDB->get_prop_and_delete( $conn, 'ike' ) if ( defined $ike );

        # remove ESP
        my $esp = $ipsecDB->get_prop( $conn, 'esp' );
        $ipsecDB->get_prop_and_delete( $conn, 'esp' ) if ( defined $esp );

        # remove phase2
        my $phase2 = $ipsecDB->get_prop( $conn, 'phase2' );
        $ipsecDB->get_prop_and_delete( $conn, 'phase2' ) if ( defined $phase2 );
    } ## end foreach my $ipsecprop (@connections)
}
