Public feed
#527579
path pre_shared_key "/var/etc/psk.txt";
path certificate "/var/etc";
remote x.x.x.23 {
exchange_mode main;
my_identifier address "<my WAN address>";
peers_identifier address x.x.x.23;
initial_contact on;
support_proxy on;
proposal_check obey;
proposal {
encryption_algorithm rijndael 256;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group 2;
lifetime time 3600 secs;
}
lifetime time 3600 secs;
}
sainfo address 172.16.130.0/26 any address 10.4.12.0/24 any {
encryption_algorithm 3des,rijndael,rijndael 256;
authentication_algorithm hmac_sha1;
compression_algorithm deflate;
lifetime time 3600 secs;
}
////////////////////// LOGS ///////////////////////////////
Jun 1 12:47:33 nfd racoon: INFO: racoon shutdown
Jun 1 12:47:34 nfd racoon: INFO: @(#)ipsec-tools 0.6.6 (http://ipsec-tools.sourceforge.net)
Jun 1 12:47:34 nfd racoon: INFO: @(#)This product linked OpenSSL 0.9.7e-p1 25 Oct 2004 (http://www.openssl.org/)
Jun 1 12:47:34 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%vlan0[500] used as isakmp port (fd=13)
Jun 1 12:47:34 nfd racoon: INFO: 193.164.138.8[500] used as isakmp port (fd=14)
Jun 1 12:47:34 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun 1 12:47:34 nfd racoon: INFO: fe80::1%lo0[500] used as isakmp port (fd=15)
Jun 1 12:47:34 nfd racoon: INFO: ::1[500] used as isakmp port (fd=16)
Jun 1 12:47:34 nfd racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=17)
Jun 1 12:47:34 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun 1 12:47:34 nfd racoon: INFO: 172.16.130.1[500] used as isakmp port (fd=18)
Jun 1 12:47:34 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun 1 12:47:34 nfd racoon: INFO: fe80::211:25ff:fe57:8f7d%em1[500] used as isakmp port (fd=19)
Jun 1 12:47:34 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%em0[500] used as isakmp port (fd=20)
Jun 1 12:47:34 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.0/26[0] 172.16.130.1/32[0] proto=any dir=in
Jun 1 12:47:34 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.1/32[0] 172.16.130.0/26[0] proto=any dir=out
Jun 1 12:52:37 nfd racoon: INFO: caught signal 15
Jun 1 12:52:38 nfd racoon: INFO: racoon shutdown
Jun 1 12:52:39 nfd racoon: INFO: @(#)ipsec-tools 0.6.6 (http://ipsec-tools.sourceforge.net)
Jun 1 12:52:39 nfd racoon: INFO: @(#)This product linked OpenSSL 0.9.7e-p1 25 Oct 2004 (http://www.openssl.org/)
Jun 1 12:52:39 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%vlan0[500] used as isakmp port (fd=13)
Jun 1 12:52:39 nfd racoon: INFO: 193.164.138.8[500] used as isakmp port (fd=14)
Jun 1 12:52:39 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun 1 12:52:39 nfd racoon: INFO: fe80::1%lo0[500] used as isakmp port (fd=15)
Jun 1 12:52:39 nfd racoon: INFO: ::1[500] used as isakmp port (fd=16)
Jun 1 12:52:39 nfd racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=17)
Jun 1 12:52:39 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun 1 12:52:39 nfd racoon: INFO: 172.16.130.1[500] used as isakmp port (fd=18)
Jun 1 12:52:39 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun 1 12:52:39 nfd racoon: INFO: fe80::211:25ff:fe57:8f7d%em1[500] used as isakmp port (fd=19)
Jun 1 12:52:39 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%em0[500] used as isakmp port (fd=20)
Jun 1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.0/26[0] 172.16.130.1/32[0] proto=any dir=in
Jun 1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 10.4.12.0/24[0] 172.16.130.0/26[0] proto=any dir=in
Jun 1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.1/32[0] 172.16.130.0/26[0] proto=any dir=out
Jun 1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.0/26[0] 10.4.12.0/24[0] proto=any dir=out