rendered paste bodyracoon.conf
# Racoon IKE daemon configuration file.
# See 'man racoon.conf' for a description of the format and entries.
path include "/etc/racoon";
path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs";
log debug;
listen
{
isakmp 192.168.1.254 [500];
}
remote anonymous
{
exchange_mode main,aggressive;
doi ipsec_doi;
situation identity_only;
nonce_size 16;
lifetime time 3600 sec; # sec,min,hour
initial_contact on;
proposal_check obey; # obey, strict or claim
proposal {
encryption_algorithm 3des;
hash_algorithm md5;
authentication_method pre_shared_key;
dh_group 1;
}
}
sainfo anonymous
{
lifetime time 3600 sec ;
encryption_algorithm 3des ;
authentication_algorithm hmac_md5 ;
compression_algorithm deflate ;
}
include "/etc/racoon/192.168.1.201.conf";
192.168.1.201.conf
remote 192.168.1.201
{
exchange_mode aggressive,main;
my_identifier address;
proposal
{
encryption_algorithm 3des ;
hash_algorithm sha1 ;
#authentication_algorithm sha1 ;
authentication_method pre_shared_key ;
dh_group 1 ;
}
}