From owner-freebsd-net@FreeBSD.ORG  Thu May 12 01:41:02 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id CFE5516A4CE
	for <freebsd-net@freebsd.org>; Thu, 12 May 2005 01:41:02 +0000 (GMT)
Received: from papa.tanu.org (kame195.kame.net [203.178.141.195])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B930543D62
	for <freebsd-net@freebsd.org>; Thu, 12 May 2005 01:40:57 +0000 (GMT)
	(envelope-from sakane@kame.net)
Received: from localhost (ZH086126.ppp.dion.ne.jp [222.3.86.126])
	by papa.tanu.org (8.12.9/8.12.8) with ESMTP id j4C1fJu9037722
	for <freebsd-net@freebsd.org>; Thu, 12 May 2005 10:41:20 +0900 (JST)
	(envelope-from sakane@kame.net)
From: "mytrix" <mytrix@net4you.cz>
To: <freebsd-net@freebsd.org>
X-Mailer: Cue version 0.8 (050427-2145/sakane)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Message-Id: <20050512104052H.sakane@kame.net>
Date: Thu, 12 May 2005 10:40:52 +0900
Sender: Shoichi Sakane <sakane@kame.net>
X-Dispatcher: imput version 20050308(IM148)
Lines: 9
X-Virus-Scanned: clamd / ClamAV version 0.75.1, clamav-milter version 0.75c
	on papa.tanu.org
X-Virus-Status: Clean
Subject: Re: L2TP/IPSec + Racoon
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 12 May 2005 01:41:02 -0000

> I has been installed L2TP/IPSec + Racoon on fBSD 5.3. It works perfect but
> there are some things, which i want to resolve.
> 
> 1. I`m using for authentification of clients shared_key. But it has some
> disadvantages. Clients are "road warrior" and it means, that i can`t know
> their IP in advance. So, it`s any way, how can i add it to psk.txt file? I
> test 0.0.0.0/0 SECRET_KEY, but it doesn`t work :(.

don't use pre-shared key.  or use aggressive mode.