configuration management

I have near on two dozen ipsec endpoints that are pretty much interconnected n-way with some exceptions. I have a file on each endpoint that has IP pairs, local & remote, from which a script generates an /etc/ipsec-tools.conf and /etc/racoon/racoon.conf using templates when those services...