# Update #INITIATOR to the ip address of the initiator system
# Update #RESPONDER to the ip address of the responder system
# Update #AUTHENTICATION_METHOD with the authentication method, 
# pre_shared_key, rsa_signature or dss_signature.
# Update #CERTIFICATE to the file name of the certificiate used for 
# authentication_method rsa_signature or dss_signature.
# Update #PRIVATE_KEY to the file name of the private key used for 
# authentication_method rsa_signature or dss_signature.

general {
    listen #INITIATOR;
    exchange_max_time 30;
    spi_min 100000;
    spi_max 199999;
}
ike_sa address #RESPONDER {
    ike_id default;
    exchange_version 2,1;
    passive off;
    liveness 0;
    initial_contact off;
    lifetime 8 hours;
    authentication {
        method #AUTHENTICATION_METHOD;
        shared_key this_should_be_secret;
        certificate #CERTIFICATE;
        private_key #PRIVATE_KEY;
        private_key_password 1111;
        trusted_ca_store trusted;
        intermediate_ca_store intermediate;
    }
    proposal {
        dh_group 2,1;
        hash_algorithm sha1,md5;
        encryption_algorithm 3des,des;
        integrity_algorithm sha1,md5;
    }
}
ipsec_sa address #INITIATOR address #RESPONDER {
    ike_id default;
    encapsulation_mode tunnel;
    lifetime 3600 seconds;
    proposal {
        dh_group 2,1;
        encryption_algorithm 3des,des;
        integrity_algorithm sha1,md5;
    }
}