path certificate "/etc/racoon/certs";
remote anonymous {
  exchange_mode main;
  peers_identifier asn1dn;
  my_identifier asn1dn;
  verify_identifier on;
  verify_cert on;
  nat_traversal on;
  certificate_type x509 "skrs0116.eftdomain.net.crt" "skrs0116.eftdomain.net.key";

  proposal {
    encryption_algorithm aes 256;
    hash_algorithm sha1;
    authentication_method rsasig;
    dh_group 5;
    lifetime time 86400 sec;
  }
}

sainfo anonymous {
  lifetime time 1 hour ;
  encryption_algorithm aes 256 ;
  authentication_algorithm hmac_sha1;
  compression_algorithm deflate ;
}