racoon.conf

# Racoon IKE daemon configuration file.
# See 'man racoon.conf' for a description of the format and entries.

path include "/etc/racoon";
path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs";
log debug;

listen
{
   isakmp 192.168.1.254 [500];
}


remote anonymous
{
    exchange_mode main,aggressive;
    doi ipsec_doi;
    situation identity_only;

    nonce_size 16;
    lifetime time 3600 sec; # sec,min,hour
    initial_contact on;
    proposal_check obey; # obey, strict or claim

    proposal {
        encryption_algorithm 3des;
        hash_algorithm md5;
        authentication_method pre_shared_key;
        dh_group 1;
    }
}

sainfo anonymous
{
        lifetime time 3600 sec ;
        encryption_algorithm 3des ;
        authentication_algorithm hmac_md5 ;
        compression_algorithm deflate ;
}



include "/etc/racoon/192.168.1.201.conf";




192.168.1.201.conf

remote 192.168.1.201
{
        exchange_mode aggressive,main;
        my_identifier address;
        proposal 
        {
                encryption_algorithm 3des ;
                hash_algorithm sha1 ;
                #authentication_algorithm sha1 ;
                authentication_method pre_shared_key ;
                dh_group 1 ;
        }
}