adden new isakmpd

1 files changed, 64 insertions, 0 deletions

diff --git a/keyexchange/isakmpd-20041012/samples/singlehost-east.conf b/keyexchange/isakmpd-20041012/samples/singlehost-east.conf
new file mode 100644
index 0000000..f0afc46
--- /dev/null
+++ b/keyexchange/isakmpd-20041012/samples/singlehost-east.conf
@@ -0,0 +1,64 @@
+#	$OpenBSD: singlehost-east.conf,v 1.10 2000/11/23 12:56:25 niklas Exp $
+#	$EOM: singlehost-east.conf,v 1.10 2000/11/23 12:24:43 niklas Exp $
+
+# A configuration sample for the isakmpd ISAKMP/Oakley (aka IKE) daemon.
+
+[General]
+Listen-on=		10.1.0.12
+Shared-SADB=		Defined
+Policy-File=		policy
+
+[Phase 1]
+10.1.0.11=		ISAKMP-peer-west
+Default=		ISAKMP-peer-west-aggressive
+
+[Phase 2]
+Connections=		IPsec-east-west
+
+[ISAKMP-peer-west]
+Phase=			1
+Transport=		udp
+Local-address=		10.1.0.12
+Address=		10.1.0.11
+Configuration=		Default-main-mode
+Authentication=		mekmitasdigoat
+
+[ISAKMP-peer-west-aggressive]
+Phase=			1
+Transport=		udp
+Local-address=		10.1.0.12
+Address=		10.1.0.11
+Configuration=		Default-aggressive-mode
+Authentication=		mekmitasdigoat
+
+[IPsec-east-west]
+Phase=			2
+ISAKMP-peer=		ISAKMP-peer-west
+Configuration=		Default-quick-mode
+Local-ID=		Net-east
+Remote-ID=		Net-west
+
+[Net-west]
+ID-type=		IPV4_ADDR_SUBNET
+Network=		192.168.11.0
+Netmask=		255.255.255.0
+
+[Net-east]
+ID-type=		IPV4_ADDR_SUBNET
+Network=		192.168.12.0
+Netmask=		255.255.255.0
+
+[Default-main-mode]
+DOI=			IPSEC
+EXCHANGE_TYPE=		ID_PROT
+Transforms=		3DES-SHA
+
+[Default-aggressive-mode]
+DOI=			IPSEC
+EXCHANGE_TYPE=		AGGRESSIVE
+Transforms=		3DES-SHA-RSA
+
+[Default-quick-mode]
+DOI=			IPSEC
+EXCHANGE_TYPE=		QUICK_MODE
+Suites=			QM-ESP-AES-SHA-PFS-SUITE