доброго всем времени суток!
Бьюсь вот над такой проблемой, есть 2 фрюшных 7.0 компа,адреса 1)172.16.127.1 2)172.16.127.2,между ними настроен туннель с помощью gif с адресам концов 192.168.1.1 и 192.168.2.1 соответственно, туннель сам работает и пинги идут,далее пытаюсь поднять ipsec и не запускается racoon, при старте выводит сообщение:
DEBUG: pfkey X_SPDDUMP failed: No such file or directory.
конфиги первой машины(для второй поменяны местами адреса):
в /etc/rc.conf прописано:
ipsec_enable="YES"
ipsec_file="/etc/ipsec.conf"
racoon_enable="YES"
racoonf_flags="-F -f /usr/local/etc/racoon/racoon.conf"

/etc/ipsec.conf:

#!/sbin/setkey -f
flush;
spdflush;
spdadd 172.16.127.1/32 172.16.127.2/32 any -P out ipsec esp/tunnel/172.16.127.1-172.16.127.2/require;
spdadd 172.16.127.2/32 172.16.127.1/32 any -P in ipsec esp/tunnel/172.16.127.2-172.16.127.1/require;

/usr/local/etc/racoon/racoon.conf

path include "/usr/local/etc/racoon" ;
path pre_shared_key "/usr/local/etc/racoon/psk.txt" ;
# "log" specifies logging level.  It is followed by either "notify", "debug"
# or "debug2".
#log notify;
padding
{
        maximum_length 20;      # maximum padding length.
        randomize off;          # enable randomize length.
        strict_check off;       # enable strict check.
        exclusive_tail off;     # extract last one octet.
}

listen
{
        #isakmp ::1 [7000];
        isakmp 172.16.127.1 [500];
        #admin [7002];          # administrative's port by kmpstat.
        #strict_address;        # required all addresses must be bound.
}

timer
{
        # These value can be changed per remote node.
        counter 5;              # maximum trying count to send.
        interval 20 sec;        # maximum interval to resend.
        persend 1;              # the number of packets per a send.

        # timer for waiting to complete each phase.
        phase1 30 sec;
        phase2 15 sec;
}

remote anonymous
{
        #exchange_mode main,aggressive;
        exchange_mode aggressive,main;
        doi ipsec_doi;
        situation identity_only;

        my_identifier address;
        #certificate_type x509 "mycert" "mypriv";

        #nonce_size 16;
        lifetime time 2 min;    # sec,min,hour
        initial_contact on;
        #support_mip6 on;
        proposal_check obey;    # obey, strict or claim

        proposal {
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method pre_shared_key ;
                dh_group 2 ;
        }
}

sainfo anonymous
{
        pfs_group 1;
        lifetime time 2 min;
        encryption_algorithm 3des ;
        authentication_algorithm hmac_sha1;
        compression_algorithm deflate ;
}