I don't know the specific answer to your question but I know that 2 Openswan devices will connect w/o issues with aggressive mode off. I actually have a ton of devices running this way in my network (they're using RSAs though). I did test however, with PSK and %any w/o aggressive mode and it worked.<br>
<br>-Robyn<br><br><div class="gmail_quote">On Wed, Apr 29, 2009 at 7:06 AM, Benny Amorsen <span dir="ltr"><<a href="mailto:benny%2Busenet@amorsen.dk">benny+usenet@amorsen.dk</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">Paul Wouters <<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>> writes:<br>
<br>
> You can send ID's in main mode, but it is not quick enough to determine who is who when<br>
> using PSK (instead of RSA or X.509). So for PSK, yes you need aggressive mode.<br>
<br>
</div>Is this fixed with IKEv2?<br>
<font color="#888888"><br>
<br>
/Benny<br>
<br>
</font></blockquote></div><br>