path pre_shared_key "/etc/racoon/psk.txt";

log debug;

timer {
	natt_keepalive 10 sec;
}

remote XXXXX {
	exchange_mode aggressive;
	nat_traversal on;
	my_identifier user_fqdn "XXXXX";
	xauth_login "XXXXX";
	proposal {
		encryption_algorithm 3des;
		hash_algorithm sha1;
		authentication_method pre_shared_key;
		dh_group modp1024;
	}
}

sainfo address XXXXX/32 any address XXXXX/28 any {
	encryption_algorithm 3des;
	authentication_algorithm hmac_sha1;
}