[BACK]Return to racoon.conf CVS log [TXT] [DIR] Up to [ELWIX - Embedded LightWeight unIX -] / elwix / config / etc / default / racoon / roadwarrior / client
File:  [ELWIX - Embedded LightWeight unIX -] / elwix / config / etc / default / racoon / roadwarrior / client / racoon.conf
Revision 1.1.1.1 (vendor branch): download - view: text, annotated - select for diffs - revision graph
Tue Jul 5 23:43:00 2011 UTC (13 years, 2 months ago) by misho
Branches: misho, MAIN
CVS tags: start, elwix2_3, elwix2_2, elwix2_1, elwix2_0, elwix1_9_mips, elwix1_9, elwix1_8, elwix1_7, elwix1_6, elwix1_5, elwix1_4, Patch1, HEAD, ELWIX2_2p0, ELWIX2_1, ELWIX2_0, ELWIX1_9, ELWIX1_8, ELWIX1_7, ELWIX1_6, ELWIX1_5
ELWIX project

    1: path certificate "/etc/openssl/certs";
    2: path pre_shared_key "/etc/racoon/psk.txt";
    3: 
    4: listen {
    5: 	adminsock "/var/racoon/racoon.sock" "root" "operator" 0660;
    6: }
    7: 
    8: remote 192.0.2.50 {
    9:         exchange_mode aggressive;
   10: 	ca_type x509 "root-ca.crt";
   11:         proposal_check strict;
   12: 	nat_traversal on;
   13: 	ike_frag on;
   14: 	mode_cfg on;
   15: 	script "/etc/racoon/phase1-up.sh" phase1_up;
   16: 	script "/etc/racoon/phase1-down.sh" phase1_down;
   17: 	passive off;
   18:         proposal {
   19:                 encryption_algorithm aes;
   20:                 hash_algorithm sha1;
   21:                 authentication_method hybrid_rsa_client;
   22:                 dh_group 2;
   23:         }
   24: }
   25: 
   26: 
   27: sainfo anonymous {
   28:         pfs_group 2;
   29:         lifetime time 1 hour;
   30:         encryption_algorithm aes;
   31:         authentication_algorithm hmac_sha1;
   32:         compression_algorithm deflate ;
   33: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>