ipsec-tools/racoon/Sample/anonymous.conf

   1 remote anonymous
   2 {
   3         #exchange_mode main,aggressive;
   4         exchange_mode aggressive,main;
   5         doi ipsec_doi;
   6         situation identity_only;
   7
   8         #my_identifier address;
   9         my_identifier user_fqdn "macuser@localhost";
  10         peers_identifier user_fqdn "macuser@localhost";
  11         #certificate_type x509 "mycert" "mypriv";
  12
  13         nonce_size 16;
  14         lifetime time 1 min;    # sec,min,hour
  15         initial_contact on;
  16         support_mip6 on;
  17         proposal_check obey;    # obey, strict or claim
  18
  19         proposal {
  20                 encryption_algorithm 3des;
  21                 hash_algorithm sha1;
  22                 authentication_method pre_shared_key ;
  23                 dh_group 2 ;
  24         }
  25 }
  26
  27 sainfo anonymous
  28 {
  29         pfs_group 1;
  30         lifetime time 30 sec;
  31         encryption_algorithm aes, 3des ;
  32         authentication_algorithm hmac_sha1;
  33         compression_algorithm deflate ;
  34 }