#	$OpenBSD: singlehost-east.conf,v 1.8 2000/05/03 13:37:33 niklas Exp $
#	$EOM: singlehost-east.conf,v 1.8 2000/05/03 13:25:25 niklas Exp $

# A configuration sample for the isakmpd ISAKMP/Oakley (aka IKE) daemon.

[General]
Listen-on=		10.1.0.2
Shared-SADB=		Defined

[Phase 1]
10.1.0.1=		ISAKMP-peer-west
Default=		ISAKMP-peer-west-aggressive

[Phase 2]
Connections=		IPsec-east-west

[ISAKMP-peer-west]
Phase=			1
Transport=		udp
Local-address=		10.1.0.2
Address=		10.1.0.1
Configuration=		Default-main-mode
Authentication=		mekmitasdigoat

[ISAKMP-peer-west-aggressive]
Phase=			1
Transport=		udp
Local-address=		10.1.0.2
Address=		10.1.0.1
Configuration=		Default-aggressive-mode
Authentication=		mekmitasdigoat

[IPsec-east-west]
Phase=			2
ISAKMP-peer=		ISAKMP-peer-west
Configuration=		Default-quick-mode
Local-ID=		Net-east
Remote-ID=		Net-west

[Net-west]
ID-type=		IPV4_ADDR_SUBNET
Network=		192.168.1.0
Netmask=		255.255.255.0

[Net-east]
ID-type=		IPV4_ADDR_SUBNET
Network=		192.168.2.0
Netmask=		255.255.255.0

[Default-main-mode]
DOI=			IPSEC
EXCHANGE_TYPE=		ID_PROT
Transforms=		3DES-SHA

[Default-aggressive-mode]
DOI=			IPSEC
EXCHANGE_TYPE=		AGGRESSIVE
Transforms=		3DES-SHA-RSA

[Default-quick-mode]
DOI=			IPSEC
EXCHANGE_TYPE=		QUICK_MODE
Suites=			QM-ESP-3DES-SHA-PFS-SUITE