gistfile1.txt

# cat /var/etc/racoon.conf
# This file is automatically generated. Do not edit
path pre_shared_key "/var/etc/psk.txt";

path certificate  "/var/etc";


listen
{
        adminsock "/var/db/racoon/racoon.sock" "root" "wheel" 0660;
        isakmp 199.66.217.2 [500];
}


remote 184.71.12.170
{
        ph1id 1;
        exchange_mode main;
        my_identifier address 199.66.217.2;
        peers_identifier address 184.71.12.170;
        ike_frag on;
        generate_policy = off;
        initial_contact = on;
        nat_traversal = off;


        dpd_delay = 10;
        dpd_maxfail = 5;
        support_proxy on;
        proposal_check claim;


        proposal
        {
                authentication_method pre_shared_key;
                encryption_algorithm 3des;
                hash_algorithm sha1;
                dh_group 2;
                lifetime time 28800 secs;
        }
}

sainfo subnet 172.21.50.0/24 any subnet 172.21.10.0/24 any
{
        remoteid 1;
        encryption_algorithm 3des;
        authentication_algorithm hmac_sha1;

        lifetime time 3600 secs;
        compression_algorithm deflate;
}