Just a quibble: according to racoon.conf(5)

                     encryption_algorithm algorithm;
                             specify the encryption algorithm used for the
                             phase 1 negotiation.  This directive must be de-
                             fined.  algorithm is one of following: des, 3des,
                             blowfish, cast128 for oakley.  For other trans-
                             forms, this statement should not be used.

but in racoon.conf.sample:

        encryption_algorithm 3des, cast128, blowfish 448, des, rijndael ;

.. and what does that 448 mean?

Cheers,

Patrick