diff --git a/README-zh.md b/README-zh.md
index a3a9bdd..f824a36 100644
--- a/README-zh.md
+++ b/README-zh.md
@@ -168,8 +168,6 @@ wget https://git.io/vpnupgrade -O vpnupgrade.sh
wget https://git.io/vpnupgrade-centos -O vpnupgrade.sh
```
-:warning: VPN 脚本默认安装 Libreswan 3.22,因为新版本 3.23 和 3.25 存在问题,从而不能同时连接在同一个 NAT (比如家用路由器)后面的多个 IPsec/XAuth VPN 客户端。
-
## 问题和反馈
- 有问题需要提问?请先搜索已有的留言,在 这个 Gist 以及 我的博客。
diff --git a/README.md b/README.md
index 8c37b71..c8b14ac 100644
--- a/README.md
+++ b/README.md
@@ -168,8 +168,6 @@ wget https://git.io/vpnupgrade -O vpnupgrade.sh
wget https://git.io/vpnupgrade-centos -O vpnupgrade.sh
```
-:warning: The VPN scripts install Libreswan 3.22 by default, because newer versions 3.23 and 3.25 have issues with connecting multiple IPsec/XAuth VPN clients from behind the same NAT (e.g. home router).
-
## Bugs & Questions
- Got a question? Please first search other people's comments in this Gist and on my blog.
diff --git a/docs/ikev2-howto-zh.md b/docs/ikev2-howto-zh.md
index 1830045..2635661 100644
--- a/docs/ikev2-howto-zh.md
+++ b/docs/ikev2-howto-zh.md
@@ -60,6 +60,15 @@ Libreswan 支持通过使用 RSA 签名算法的 X.509 Machine Certificates 来
$ ipsec --version
```
+ 如果是 Libreswan 3.23 或更新版本:
+
+ ```bash
+ $ cat >> /etc/ipsec.conf <> /etc/ipsec.conf <