Racoon VPN to Cisco FW

[Jumpy]

I hoping someone else here has successfully setup racoon before. I've got the phase 1 negotiation successfully completing, but phase two is always failing. I'm using a pre shared key, but my question is do I need to put anything in the certs directory of racoon?

/etc/racoon/certs???

Or is that just there if your using certs instead of a preshared key?

Thanks in advance.

[mathewplunkett]

Try having a look at this doc. It helped me out when I was setting up my first tunnel. If you are still having trouble after I'll get a little more info from you. To answer the question asked, You need one or the other but not both. If you are using a preshared key you don't need certs. Good luck.

http://www.redhat.com/docs/manuals/e...fig-ipsec.html