cat /etc/racoon/racoon.conf
# THIS IS A SAMPLE FILE!
#
# This is a sample file to test Gentoo's ipsec-tools out of the box.
# Do not use it in production.  See: http://www.ipsec-howto.org/
#
path pre_shared_key "/etc/racoon/psk.txt";

#
# Make sure to switch 192.168.3.21 <-> 192.168.3.25 on the peer
#
#remote 192.168.3.25
remote X1.X1.X1.X1
{
        exchange_mode main;
        proposal {
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method pre_shared_key;
                dh_group 2;
        }
}

#
# Make sure to switch 192.168.3.21 <-> 192.168.3.25 on the peer
#
#sainfo address 192.168.3.21 any address 192.168.3.25 any
sainfo address Y.Y.Y.Yany address X1.X1.X1.X1 any
{
        pfs_group modp768;
        encryption_algorithm 3des;
        authentication_algorithm hmac_sha1;
        compression_algorithm deflate;
}

log debug;