Annotation of embedaddon/ipsec-tools/src/racoon/samples/roadwarrior/client/racoon.conf, revision 1.1
1.1 ! misho 1: path certificate "/etc/openssl/certs";
! 2: path pre_shared_key "/etc/racoon/psk.txt";
! 3:
! 4: listen {
! 5: adminsock "/var/racoon/racoon.sock" "root" "operator" 0660;
! 6: }
! 7:
! 8: remote 192.0.2.50 {
! 9: exchange_mode aggressive;
! 10: ca_type x509 "root-ca.crt";
! 11: proposal_check strict;
! 12: nat_traversal on;
! 13: ike_frag on;
! 14: mode_cfg on;
! 15: script "/etc/racoon/phase1-up.sh" phase1_up;
! 16: script "/etc/racoon/phase1-down.sh" phase1_down;
! 17: passive off;
! 18: proposal {
! 19: encryption_algorithm aes;
! 20: hash_algorithm sha1;
! 21: authentication_method hybrid_rsa_client;
! 22: dh_group 2;
! 23: }
! 24: }
! 25:
! 26:
! 27: sainfo anonymous {
! 28: pfs_group 2;
! 29: lifetime time 1 hour;
! 30: encryption_algorithm aes;
! 31: authentication_algorithm hmac_sha1;
! 32: compression_algorithm deflate ;
! 33: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>