root@gw:~# cat /etc/racoon/racoon.conf
path pre_shared_key "/etc/racoon/psk.txt";

path certificate  "/etc/racoon";

remote 93.62.81.185 {
        exchange_mode main;
        my_identifier address 192.168.112.199;
        nat_traversal on;

        peers_identifier address 93.62.81.185;
        initial_contact on;
        support_proxy on;
        proposal_check obey;
        dpd_delay 60;

        proposal {
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method pre_shared_key;
                dh_group 5;
        }
}

sainfo address 192.168.112.0/24 any address 192.168.128.0/24 any {
        encryption_algorithm des,3des,blowfish,cast128,rijndael;
        authentication_algorithm hmac_sha1,hmac_md5;
        compression_algorithm deflate;
        pfs_group 5;
}
root@gw:~# 
root@gw:~# cat /etc/ipsec-tools.conf
#!/usr/sbin/setkey -f

# NOTE: Do not use this file if you use racoon with racoon-tool
# utility. racoon-tool will setup SAs and SPDs automatically using
# /etc/racoon/racoon-tool.conf configuration.
# 

## Flush the SAD and SPD
#
# flush;
# spdflush;

## Some sample SPDs for use racoon
#
# spdadd 10.10.100.1 10.10.100.2 any -P out ipsec
#    esp/transport//require;
#                      
# spdadd 10.10.100.2 10.10.100.1 any -P in ipsec
#    esp/transport//require;
#