File:
[ELWIX - Embedded LightWeight unIX -] /
elwix /
config /
etc /
default /
racoon /
racoon.conf.sample-inherit
Revision
1.1.1.1 (vendor branch):
download - view:
text,
annotated -
select for diffs -
revision graph
Tue Jul 5 23:43:00 2011 UTC (13 years, 2 months ago) by
misho
Branches:
misho,
MAIN
CVS tags:
start,
elwix2_3,
elwix2_2,
elwix2_1,
elwix2_0,
elwix1_9_mips,
elwix1_9,
elwix1_8,
elwix1_7,
elwix1_6,
elwix1_5,
elwix1_4,
Patch1,
HEAD,
ELWIX2_2p0,
ELWIX2_1,
ELWIX2_0,
ELWIX1_9,
ELWIX1_8,
ELWIX1_7,
ELWIX1_6,
ELWIX1_5
ELWIX project
1: # Id: racoon.conf.sample-inherit,v 1.3 2005/12/13 16:41:07 vanhu Exp
2: # Contributed by: Michal Ludvig <mludvig@suse.cz>, SUSE Labs
3:
4: # This file shows the basic inheritance usage in 'remote' statements.
5:
6: path pre_shared_key "/etc/racoon/psk.txt";
7: path certificate "/etc/racoon";
8:
9: remote anonymous
10: {
11: exchange_mode main,aggressive;
12: doi ipsec_doi;
13: situation identity_only;
14:
15: my_identifier asn1dn;
16: certificate_type x509 "my.cert.pem" "my.key.pem";
17:
18: nonce_size 16;
19: initial_contact on;
20: proposal_check strict; # obey, strict or claim
21:
22: proposal {
23: encryption_algorithm 3des;
24: hash_algorithm sha1;
25: authentication_method rsasig;
26: dh_group 2;
27: }
28: }
29:
30: remote 3ffe:ffff::1 inherit anonymous
31: {
32: exchange_mode aggressive;
33: nat_traversal force;
34: }
35:
36: remote 3ffe:ffff::1 [8000] inherit 3ffe:ffff::1
37: {
38: lifetime time 1 min; # sec,min,hour
39:
40: proposal {
41: encryption_algorithm 3des;
42: hash_algorithm sha1;
43: authentication_method pre_shared_key;
44: dh_group 2;
45: }
46: }
47:
48: sainfo anonymous
49: {
50: pfs_group 2;
51: lifetime time 12 hour;
52: encryption_algorithm aes, 3des;
53: authentication_algorithm hmac_sha1, hmac_md5;
54: compression_algorithm deflate;
55: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>