<br><font size=2 face="sans-serif">Hi,</font>
<br><font size=2 face="sans-serif"> Is
there anybody knows how to disable this feature?, I means, do not use PFS
feature if I disable it. </font>
<br><font size=2 face="sans-serif"> <br>
Best Regards<br>
Argon Cheng<br>
TEL: 86-512-67612332 ext: 1220</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td>
<td><font size=1 face="sans-serif"><b>Ruben Laban <r.laban@ism.nl></b></font>
<br><font size=1 face="sans-serif">寄件人： users-bounces@openswan.org</font>
<p><font size=1 face="sans-serif">2007-12-19 16:40</font>
<td><font size=1 face="Arial"> </font>
<br><font size=1 face="sans-serif"> 收件人：
users@openswan.org</font>
<br><font size=1 face="sans-serif"> 副本抄送：
</font>
<br><font size=1 face="sans-serif"> 主旨：
Re: [Openswan Users] Different PFS setting
but can connect success</font></table>
<br>
<br>
<br><font size=2><tt>On Wednesday 19 December 2007, Argon_Cheng@sdc.sercomm.com
wrote:<br>
> I have two VPN stations(using openswan
2.4.4). I set PFS disable<br>
> in left station while PFS enable in right station. But these two stations<br>
> can establish VPN connection success. Is there anyone know the reason?<br>
<br>
>From the ipsec.conf manpage:<br>
<br>
pfs<br>
<br>
Whether Perfect Forward Secrecy of keys is desired on the connection's
keying <br>
channel (with PFS, penetration of the key-exchange protocol does not <br>
compromise keys negotiated earlier); Since there is no reason to ever refuse
<br>
PFS, Openswan will allow a connection defined with pfs=no to use PFS anyway.
<br>
Acceptable values are yes (the default) and no.<br>
<br>
Regards,<br>
-- <br>
Ruben Laban<br>
Systems and Network Administrator<br>
r.laban@ism.nl<br>
<br>
ISM eCompany<br>
Van Nelleweg 1<br>
Postbus 13043<br>
3004 HA Rotterdam<br>
+31 (0)10 243 6000 (tel)<br>
+31 (0)10 243 6066 (fax)<br>
www.ism.nl<br>
<br>
Quality Solutions - Reliable Partner<br>
_______________________________________________<br>
Users@openswan.org<br>
http://lists.openswan.org/mailman/listinfo/users<br>
Building and Integrating Virtual Private Networks with Openswan: <br>
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155<br>
</tt></font>
<br>