forum.lissyara.su

Код: Выделить всё

$ sudo cat /etc/racoon/racoon.conf 
path include "/etc/racoon";
path pre_shared_key "/etc/racoon/psk.txt"; здесь pre-shared ключ для каждого удаленного сервера
path certificate "/etc/racoon/certs";

sainfo address 172.21.0.0/16 any address 192.168.100.0/28 any 
{
        pfs_group 2;
        lifetime time 1 hour ;
        encryption_algorithm 3des, blowfish 448, rijndael ;
        authentication_algorithm hmac_sha1, hmac_md5 ;
        compression_algorithm deflate ;
}

listen 
{                                                                                                                             
        isakmp 194.106.00.10 [500]; 
        #admin [7002];          # administrative's port by kmpstat. 
        #strict_address;        # required all addresses must be bound. 
} 
                                                
log notify;
                                                                                
remote 62.64.10.20 
{ 
        #exchange_mode main,aggressive,base; 
        exchange_mode main,base; 
        doi ipsec_doi; 
        situation identity_only; 
        lifetime time 8 hour ; # sec,min,hour 
        initial_contact on; 
        generate_policy on;
        proposal { 
                encryption_algorithm 3des; 
                hash_algorithm sha1; 
                authentication_method pre_shared_key; 
                dh_group 2 ; 
                } 
        proposal_check obey; 
}