[General]
Retransmits=5
Exchange-max-time=120
Listen-on=1.2.3.4
Policy-File=/etc/isakmpd/isakmpd.policy

[Phase 1]

[Phase 2]
Passive-Connections=LocalRemoteVerbindung

[Default-phase-1]
Phase=1
Local-address=1.2.3.4
Configuration=Default-main-mode
Authentication=MyPassphrase

[LocalRemoteVerbindung]
Phase=2
ISAKMP-peer=JederRemoteRechner
Configuration=Default-quick-mode
Local-ID=LocalRechnerID
#Remote-ID=RemoteRechnerID

[LocalRechnerID]
ID-type=IPV4_ADDR_SUBNET
Network=192.168.1.128
Netmask=255.255.255.192

[Default-main-mode]
DOI=IPSEC
EXCHANGE_TYPE=ID_PROT
Transforms=3DES-MD5

[Default-quick-mode]
DOI=IPSEC
EXCHANGE_TYPE=QUICK_MODE
Suites=QM-ESP-3DES-MD5-PFS-SUITE

[3DES-MD5]
ENCRYPTION_ALGORITHM=   3DES_CBC
HASH_ALGORITHM=         MD5
AUTHENTICATION_METHOD=  PRE_SHARED
GROUP_DESCRIPTION=      MODP_1024
Life=                   LIFE_600_SECS,LIFE_50000_KB

[QM-ESP-3DES-MD5-PFS-SUITE]
Protocols=              QM-ESP-3DES-MD5-PFS

[QM-ESP-3DES-MD5-PFS]
TRANSFORM_ID=                   3DES
ENCAPSULATION_MODE=             TUNNEL
AUTHENTICATION_ALGORITHM=       HMAC_MD5
GROUP_DESCRIPTION=              MODP_1024
Life=                           LIFE_600_SECS

[LIFE_600_SECS]
LIFE_TYPE=              SECONDS
LIFE_DURATION=          600,450:100000

[LIFE_50000_KB]
LIFE_TYPE=              KILOBYTES
LIFE_DURATION=          10000,7500:50000