IPSEC-Racoon tunnels using gif(4) and rotating keys

log debug; path pre_shared_key "/usr/local/etc/racoon/psk.txt";

listen {

     isakmp 10.0.11.1 [500];
     isakmp_natt 10.0.11.1 [4500];
     isakmp 10.0.11.7 [500];
     isakmp_natt 10.0.11.7 [4500];
     isakmp 10.0.11.8 [500];
     isakmp_natt 10.0.11.8 [4500];
     isakmp 10.0.11.4 [500];
     isakmp_natt 10.0.11.4 [4500];
     isakmp 10.0.11.5 [500];
     isakmp_natt 10.0.11.5 [4500];
     isakmp 10.0.11.9 [500];
     isakmp_natt 10.0.11.9 [4500];

}

remote anonymous {

       dpd_delay 60;
       lifetime time 2 hour;
       my_identifier   address 1.2.3.4;
       proposal_check  obey;
       exchange_mode main,aggressive;
       proposal {
               encryption_algorithm blowfish;
               hash_algorithm md5;
               authentication_method pre_shared_key;
               dh_group 2;
       }
       generate_policy off;

}

sainfo anonymous{

       pfs_group 2;
       lifetime time 1 hour;
       encryption_algorithm blowfish,3des;
       authentication_algorithm hmac_md5,hmac_sha1;
       compression_algorithm deflate;

}