racoon.conf

log notify;
path pre_shared_key "/etc/racoon/psk.txt";

remote anonymous {
  exchange_mode main;
  proposal {
    encryption_algorithm aes_256;
    hash_algorithm sha1;
    authentication_method pre_shared_key;
    dh_group modp1024;
  }
  generate_policy off;
  lifetime time 12 hour;

}

sainfo anonymous{
  pfs_group 2;
  encryption_algorithm aes_256;
  authentication_algorithm hmac_sha1;
  compression_algorithm deflate;
}