Here a racoon configuration example for multiple proposals.
remote anonymous { exchange_mode main; my_identifier asn1dn; peers_identifier asn1dn; certificate_type x509 "newcert.pem" "privkey.pem"; ca_type x509 "cacert.pem"; passive on; generate_policy unique; ike_frag on; nat_traversal off; dpd_delay 30; proposal_check claim; lifetime time 24 hours; verify_identifier on; proposal { encryption_algorithm aes 256; hash_algorithm sha1; authentication_method rsasig ; dh_group 15; } proposal { encryption_algorithm 3des; hash_algorithm sha1; authentication_method rsasig ; dh_group 2; } }
Contact :