userapps/opensource/ipsec-tools/src/racoon/samples/roadwarrior/client/racoon.conf

   1 path certificate "/etc/openssl/certs";
   2 path pre_shared_key "/etc/racoon/psk.txt";
   3
   4 listen {
   5         adminsock "/var/racoon/racoon.sock" "root" "operator" 0660;
   6 }
   7
   8 remote 192.0.2.50 {
   9         exchange_mode aggressive;
  10         ca_type x509 "root-ca.crt";
  11         proposal_check obey;
  12         nat_traversal on;
  13         ike_frag on;
  14         mode_cfg on;
  15         script "/etc/racoon/phase1-up.sh" phase1_up;
  16         script "/etc/racoon/phase1-down.sh" phase1_down;
  17         passive off;
  18         proposal {
  19                 encryption_algorithm 3des;
  20                 hash_algorithm sha1;
  21                 authentication_method hybrid_rsa_client;
  22                 dh_group 2;
  23         }
  24 }
  25
  26
  27 sainfo anonymous {
  28         pfs_group 2;
  29         lifetime time 12 hour ;
  30         encryption_algorithm 3des, cast128, blowfish 448;
  31         authentication_algorithm hmac_sha1;
  32         compression_algorithm deflate ;
  33 }