<div dir="ltr">With Red Hat's ipsec init scripts it's the default!<br><br><div class="gmail_quote">2008/7/17 Paul Wouters <<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>>:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Thu, 17 Jul 2008, Peter Rosenthal wrote:<br>
<br>
</div><div class="Ih2E3d"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
After looking at the racoon code, racoon is rejecting the proposal<br>
because it does not have the same number of proto entries. OpenSwan's<br>
proposal contains just ESP while racoon's proposal has ESP and AH.<br>
<br>
What is correct spec behaviour here? Do I need to configure openswan to<br>
use AH?<br>
</blockquote>
<br></div>
ESP + AH is just wrong. Racoon shouldnt even allow it.<br><font color="#888888">
<br>
Paul<br>
</font></blockquote></div><br></div>