Configuring & Using IPSec VPNs Cont.
Kyle Amon,  Page 25
/etc/isakmpd/isakmpd.conf continued


[3DES-SHA]
ENCRYPTION_ALGORITHM=	3DES_CBC
HASH_ALGORITHM=		SHA
AUTHENTICATION_METHOD=	RSA_SIG
GROUP_DESCRIPTION=	MODP_1024
Life=			LIFE_3600_SECS

[Default-phase1-transform] 
ENCRYPTION_ALGORITHM=	ANY
HASH_ALGORITHM=		ANY
AUTHENTICATION_METHOD=	ANY
GROUP_DESCRIPTION=	ANY
Life=			ANY 


[Default-quick-mode]
DOI=			IPSEC
EXCHANGE_TYPE=		QUICK_MODE
Suites=			QM-ESP-3DES-MD5-PFS-SUITE,QM-ESP-3DES-SHA-PFS-SUITE


[QM-ESP-3DES-MD5-PFS-SUITE]
Protocols=		QM-ESP-3DES-MD5-PFS


[QM-ESP-3DES-MD5-PFS]
PROTOCOL_ID=		IPSEC_ESP
Transforms=		QM-ESP-3DES-MD5-PFS-XF


[QM-ESP-3DES-SHA-PFS-SUITE]
Protocols=		QM-ESP-3DES-SHA-PFS