path pre_shared_key "/var/etc/psk.txt";

path certificate  "/var/etc";

remote x.x.x.23 {
        exchange_mode main;
        my_identifier address "<my WAN address>";

        peers_identifier address x.x.x.23;
        initial_contact on;
        support_proxy on;
        proposal_check obey;

        proposal {
                encryption_algorithm rijndael 256;
                hash_algorithm sha1;
                authentication_method pre_shared_key;
                dh_group 2;
                lifetime time 3600 secs;
        }
        lifetime time 3600 secs;
}

sainfo address 172.16.130.0/26 any address 10.4.12.0/24 any {
        encryption_algorithm 3des,rijndael,rijndael 256;
        authentication_algorithm hmac_sha1;
        compression_algorithm deflate;
        lifetime time 3600 secs;
}



////////////////////// LOGS ///////////////////////////////


Jun  1 12:47:33 nfd racoon: INFO: racoon shutdown
Jun  1 12:47:34 nfd racoon: INFO: @(#)ipsec-tools 0.6.6 (http://ipsec-tools.sourceforge.net)
Jun  1 12:47:34 nfd racoon: INFO: @(#)This product linked OpenSSL 0.9.7e-p1 25 Oct 2004 (http://www.openssl.org/)
Jun  1 12:47:34 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%vlan0[500] used as isakmp port (fd=13)
Jun  1 12:47:34 nfd racoon: INFO: 193.164.138.8[500] used as isakmp port (fd=14)
Jun  1 12:47:34 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun  1 12:47:34 nfd racoon: INFO: fe80::1%lo0[500] used as isakmp port (fd=15)
Jun  1 12:47:34 nfd racoon: INFO: ::1[500] used as isakmp port (fd=16)
Jun  1 12:47:34 nfd racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=17)
Jun  1 12:47:34 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun  1 12:47:34 nfd racoon: INFO: 172.16.130.1[500] used as isakmp port (fd=18)
Jun  1 12:47:34 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun  1 12:47:34 nfd racoon: INFO: fe80::211:25ff:fe57:8f7d%em1[500] used as isakmp port (fd=19)
Jun  1 12:47:34 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%em0[500] used as isakmp port (fd=20)
Jun  1 12:47:34 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.0/26[0] 172.16.130.1/32[0] proto=any dir=in
Jun  1 12:47:34 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.1/32[0] 172.16.130.0/26[0] proto=any dir=out
Jun  1 12:52:37 nfd racoon: INFO: caught signal 15
Jun  1 12:52:38 nfd racoon: INFO: racoon shutdown
Jun  1 12:52:39 nfd racoon: INFO: @(#)ipsec-tools 0.6.6 (http://ipsec-tools.sourceforge.net)
Jun  1 12:52:39 nfd racoon: INFO: @(#)This product linked OpenSSL 0.9.7e-p1 25 Oct 2004 (http://www.openssl.org/)
Jun  1 12:52:39 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%vlan0[500] used as isakmp port (fd=13)
Jun  1 12:52:39 nfd racoon: INFO: 193.164.138.8[500] used as isakmp port (fd=14)
Jun  1 12:52:39 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun  1 12:52:39 nfd racoon: INFO: fe80::1%lo0[500] used as isakmp port (fd=15)
Jun  1 12:52:39 nfd racoon: INFO: ::1[500] used as isakmp port (fd=16)
Jun  1 12:52:39 nfd racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=17)
Jun  1 12:52:39 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun  1 12:52:39 nfd racoon: INFO: 172.16.130.1[500] used as isakmp port (fd=18)
Jun  1 12:52:39 nfd racoon: WARNING: setsockopt(UDP_ENCAP_ESPINUDP_NON_IKE): Invalid argument
Jun  1 12:52:39 nfd racoon: INFO: fe80::211:25ff:fe57:8f7d%em1[500] used as isakmp port (fd=19)
Jun  1 12:52:39 nfd racoon: INFO: fe80::211:25ff:fe57:8f7c%em0[500] used as isakmp port (fd=20)
Jun  1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.0/26[0] 172.16.130.1/32[0] proto=any dir=in
Jun  1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 10.4.12.0/24[0] 172.16.130.0/26[0] proto=any dir=in
Jun  1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.1/32[0] 172.16.130.0/26[0] proto=any dir=out
Jun  1 12:52:39 nfd racoon: ERROR: such policy already exists. anyway replace it: 172.16.130.0/26[0] 10.4.12.0/24[0] proto=any dir=out