1 path certificate "/etc/openssl/certs";
8 exchange_mode aggressive;
9 certificate_type x509 "server.crt" "server.key";
16 script "/etc/racoon/phase1-down.sh" phase1_down;
18 encryption_algorithm 3des;
20 authentication_method hybrid_rsa_server;
28 netmask4 255.255.255.0;
32 banner "/etc/racoon/motd";
37 lifetime time 12 hour;
38 encryption_algorithm 3des, cast128, blowfish 448;
39 authentication_algorithm hmac_sha1;
40 compression_algorithm deflate;