net/ipsec-tools/files/racoon.conf

   1 # Simple racoon.conf
   2 #
   3 # Refer to http://wiki.openwrt.org/doc/howto/vpn.ipsec.basics.racoon for
   4 # details about configuring racoon in OpenWRT.
   5 #
   6 # Also read the Linux IPSEC Howto up at
   7 # http://www.ipsec-howto.org/t1.html
   8 #
   9 # Manual pages for ipsec-tools are not included with OpenWRT. Refer to
  10 # the following locations to view them online:
  11 # http://linux.die.net/man/8/racoon
  12 # http://linux.die.net/man/5/racoon.conf
  13 # http://linux.die.net/man/8/setkey
  14 #
  15
  16 log notify;
  17 path pre_shared_key "/etc/racoon/psk.txt";
  18 path certificate "/etc/racoon/certs";
  19
  20 #remote 172.31.1.1 {
  21 #        exchange_mode main,aggressive;
  22 #        proposal {
  23 #                encryption_algorithm 3des;
  24 #                hash_algorithm sha1;
  25 #                authentication_method pre_shared_key;
  26 #                dh_group modp1024;
  27 #        }
  28 #        generate_policy off;
  29 #}
  30 #
  31 #sainfo address 192.168.203.10[any] any address 192.168.22.0/24[any] any {
  32 #        pfs_group modp768;
  33 #        encryption_algorithm 3des;
  34 #        authentication_algorithm hmac_md5;
  35 #        compression_algorithm deflate;
  36 #}