#
# protectix    
#
# The network topology of the VPN net is like this:
#
# 192.168.2.0/24 - etla [192.168.2.1/63.192.212.171] - net - [63.199.136.126/192.168.1.45] protectix - 192.168.1.0/24
#

[General]
Retransmits=5
Exchange-max-time=120
Listen-on=63.199.136.126
Shared-SADB=		Defined

[Phase 1]
63.192.212.171=etla
Default=etla
# These connections are walked over after config file parsing and told
# to the application layer so that it will inform us when traffic wants to
# pass over them.  This means we can do on-demand keying.

[Phase 2]
Connections=protectix-etla

[etla]
Phase=1
Transport=udp
Local-address= 63.199.136.126
Address=63.192.212.171
Configuration=Default-main-mode
Authentication=mekmitasdigoat
#Flags=

[etla-aggressive]
Phase=		1
Transport=	udp
Local-address=	63.199.136.126
Address=	63.192.212.171
Configuration=	Default-aggressive-mode
Authentication=	mekmitasdigoat

[protectix-etla]
Phase=2
ISAKMP-peer=etla
Configuration=Default-quick-mode
Local-ID=Net-protectix
Remote-ID=Net-etla

# Certificates stored in PEM format
[X509-certificates]
CA-directory=           /etc/isakmpd/ca/
Cert-directory=         /etc/isakmpd/certs/
Private-key=            /etc/isakmpd/private/local.key

[Net-etla]
ID-type=IPV4_ADDR_SUBNET
Network=192.168.2.0
Netmask=255.255.255.0  

[Net-protectix]
ID-type=IPV4_ADDR_SUBNET
Network=192.168.1.0
Netmask=255.255.255.0  

[Default-main-mode]
DOI=IPSEC
EXCHANGE_TYPE=ID_PROT
Transforms=3DES-SHA,3DES-MD5

[Default-quick-mode]
DOI=IPSEC
EXCHANGE_TYPE=QUICK_MODE
Suites=QM-ESP-3DES-SHA-PFS-SUITE

[Default-aggressive-mode]
DOI=		IPSEC
EXCHANGE_TYPE=	AGGRESSIVE
Transforms=	3DES-SHA,3DES-MD5

# Main mode transforms
########################
# 3DES
[3DES-SHA]
ENCRYPTION_ALGORITHM=	3DES_CBC
HASH_ALGORITHM=		SHA
AUTHENTICATION_METHOD=	PRE_SHARED
GROUP_DESCRIPTION=	MODP_1024
Life=			LIFE_180_SECS
[3DES-MD5]
ENCRYPTION_ALGORITHM=   3DES_CBC
HASH_ALGORITHM=         MD5
AUTHENTICATION_METHOD=  PRE_SHARED
GROUP_DESCRIPTION=      MODP_1024
Life=                   LIFE_180_SECS
# Quick mode description
########################
[Default-quick-mode]
DOI=			IPSEC
EXCHANGE_TYPE=		QUICK_MODE
Suites=			QM-ESP-3DES-SHA-PFS-SUITE,QM-ESP-3DES-MD5-PFS-SUITE
# Quick mode protection suites
##############################
# 3DES
[QM-ESP-3DES-SHA-PFS-SUITE]
Protocols=		QM-ESP-3DES-SHA-PFS
[QM-ESP-3DES-MD5-PFS-SUITE]
Protocols=		QM-ESP-3DES-MD5-PFS
[QM-ESP-3DES-SHA-SUITE]	
Protocols=		QM-ESP-3DES-SHA
[QM-ESP-3DES-MD5-SUITE]
Protocols=		QM-ESP-3DES-MD5
# Quick mode protocols
#############################    
# 3DES
[QM-ESP-3DES-SHA-PFS]
PROTOCOL_ID=	        IPSEC_ESP
Transforms=		QM-ESP-3DES-SHA-PFS-XF
[QM-ESP-3DES-SHA]
PROTOCOL_ID=		IPSEC_ESP
Transforms=		QM-ESP-3DES-SHA-XF
[QM-ESP-3DES-MD5-PFS]
PROTOCOL_ID=		IPSEC_ESP
Transforms=		QM-ESP-3DES-MD5-PFS-XF
[QM-ESP-3DES-MD5]
PROTOCOL_ID=	        IPSEC_ESP
Transforms=		QM-ESP-3DES-MD5-XF
# Quick mode transforms
#############################    
# 3DES
[QM-ESP-3DES-SHA-PFS-XF]
TRANSFORM_ID=			3DES
ENCAPSULATION_MODE=		TUNNEL
AUTHENTICATION_ALGORITHM=	HMAC_SHA
GROUP_DESCRIPTION=	        MODP_1024
Life=				LIFE_3600_SECS
[QM-ESP-3DES-SHA-XF]
TRANSFORM_ID=			3DES
ENCAPSULATION_MODE=		TUNNEL
AUTHENTICATION_ALGORITHM=	HMAC_SHA
GROUP_DESCRIPTION=		MODP_1024
Life=				LIFE_3600_SECS
[QM-ESP-3DES-MD5-PFS-XF]
TRANSFORM_ID=			3DES
ENCAPSULATION_MODE=		TUNNEL
AUTHENTICATION_ALGORITHM=	HMAC_MD5
GROUP_DESCRIPTION=		MODP_1024
Life=				LIFE_3600_SECS
[QM-ESP-3DES-MD5-XF]
TRANSFORM_ID=			3DES
ENCAPSULATION_MODE=		TUNNEL
AUTHENTICAION_ALGORITHM=	HMAC_MD5
GROUP_DESCRIPTION=		MODP_1024
Life=				LIFE_3600_SECS
[LIFE_8_HOURS]
LIFE_TYPE=		SECONDS
LIFE_DURATION=		28800,25200:32400
[LIFE_1_DAY]
LIFE_TYPE=		SECONDS
LIFE_DURATION=		86400,79200:93600
[LIFE_180_SECS]
LIFE_TYPE=		SECONDS
LIFE_DURATION=		180,120:240
[LIFE_3600_SECS]
LIFE_TYPE=		SECONDS
LIFE_DURATION=		3600,1800:7200