# $Id: racoon2.conf.in,v 1.34 2007/12/27 01:08:52 mk Exp $

## Edit vals.conf for your environment
include "/usr/pkg/etc/racoon2/vals.conf";

# interface info
interface
{
	ike {
		MY_IP port 500;
## Tunnel mode NAT-T: Uncomment tunnel_ike_natt.conf line below
## Transport mode NAT-T: Uncomment transport_ike.conf line below
## 			 and uncomment the transport_ike_natt.conf line in
## 			 the transport_ike.conf file 
## Uncomment to enable NAT-T (initiator and responder, tunnel and transport)
#		MY_IP port 4500;
	};
	kink {
		MY_IP;
	};
	spmd {
		unix "/var/run/racoon2/spmif";
	};
	spmd_password "/usr/pkg/etc/racoon2/spmd.pwd";
};

# resolver info
resolver
{
	resolver off;
#	resolver on;
#	nameserver {
#		WWW.XXX.YYY.ZZZ port 53;
#	};
#	dns_query {
#		127.0.0.1 port 53;
#		::1 port 53;
#	};
};




#
# This line includes default configuration file;
# Please don't touch this line (especially novice user);
#
# The default configuration for IKEv1 enables a pre-shared
# key for the wildcard address. If you want to disable this
# for security reasons, you can by commenting out the
# appropriate line in default.conf.

include "/usr/pkg/etc/racoon2/default.conf";

#
# These are examples of configuration for each peer.
#
# Uncomment following one 'include' line you want to use.

## Transport mode IKEv2 or IKEv1 (optional NAT-T support)
## To enable NAT-T transport mode support, in addition to
## uncommenting this 'include' line, also uncomment the
## 'include' line for transport_ike_natt.conf in the transport_ike.conf
## file and edit that file and vals.conf appropriately for your environment
# include "/usr/pkg/etc/racoon2/transport_ike.conf";

## Tunnel mode IKEv2 or IKEv1 (initiator and responder)
# include "/usr/pkg/etc/racoon2/tunnel_ike.conf";

## Tunnel mode IKEv2 (responder; NAT-T support)
## Enable this if you're a responder in global net and
## the peer is an initiator behind NAT.
# include "/usr/pkg/etc/racoon2/tunnel_ike_natt.conf";

## Transport mode KINK
# include "/usr/pkg/etc/racoon2/transport_kink.conf";

## Tunnel mode KINK
# include "/usr/pkg/etc/racoon2/tunnel_kink.conf";

## For local test
# include "/usr/pkg/etc/racoon2/local-test.conf";
