Re: [gentoo-user] How to IPSEC "M$oft" VPN client setup

[Graham Murray]

Mick <michaelkintz...@gmail.com> writes:

> Any progress with this guys?  I am also trying to get something running 
> between a router and my laptop (using kvnc) but I am failing with this error:

Here are some samples.

/etc/racoon/racoon.conf
path pre_shared_key "/etc/racoon/psk.txt";

remote anonymous
{
        exchange_mode main;
        proposal {
                encryption_algorithm aes;
                hash_algorithm sha1;
                lifetime time 24 hour;
                dh_group 2;
                authentication_method pre_shared_key;
        }
}

sainfo anonymous
{
        encryption_algorithm aes, 3des;
        authentication_algorithm hmac_sha256, hmac_sha1;
        compression_algorithm deflate;
}

/etc/racoon/psk.txt
10.0.1.2        This is the shared secret

/etc/ipsec.conf
flush;
spdflush;

spdadd 10.0.0.1/32 10.0.1.2/32 any -P out ipsec
        esp/transport//require;

spdadd 10.0.1.2/32 10.0.0.1/32 any -P in ipsec
        esp/transport//require;