racoon.conf.sample-gssapi

Linux 2.6 内核上配置IPSec VPN 的工具

# $KAME: racoon.conf.sample-gssapi,v 1.5 2001/08/16 06:33:40 itojun Exp $

# sample configuration for GSSAPI authentication (basically, kerberos).
# doc/README.gssapi gives some idea on how to configure it.
# TODO: more documentation.

#listen {
#	strict_address;
#}

remote anonymous {
	exchange_mode main;
	#exchange_mode aggressive;

	# specify the identifier type
	my_identifier fqdn "foo.kame.net";

	lifetime time 1 min;

	proposal {
		encryption_algorithm blowfish;
		hash_algorithm sha1;
		#authentication_method pre_shared_key;
		authentication_method gssapi_krb;
		gssapi_id "ike/myidentification";

		dh_group 1;
	}
}

sainfo anonymous {
	my_identifier fqdn "foo.kame.net";

	lifetime time 30 min;

	encryption_algorithm blowfish 448;
	authentication_algorithm hmac_sha1;
	compression_algorithm deflate;
}