<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:8pt"><DIV>Hi all,</DIV>
<DIV> </DIV>
<DIV>We are using Openswan on linux to setup ipsec transport mode with AH protocol. It seems even after configuring for AH, it sends proposal for ESP aswell. Please let me know if Openswan supports AH only mode as of now.</DIV>
<DIV> </DIV>
<DIV>My ipsec.conf file looks as under -</DIV>
<DIV>conn printer</DIV>
<DIV> </DIV>
<DIV> auth=ah <BR><BR> ah=hmac-md5<BR><BR> authby=secret</DIV>
<DIV><BR> pfs=no<BR><BR> rekey=no<BR><BR> keyingtries=3<BR><BR> type=transport<BR><BR> left=10.0.0.1<BR><BR> right=10.0.0.2<BR><BR> auto=start<BR></DIV>
<DIV>According to this it seems like the AH only mode is still a feature to be implemented.</DIV>
<DIV><A href="http://bugs.xelerance.com/view.php?id=210">http://bugs.xelerance.com/view.php?id=210</A></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Dev</DIV></div><br>
</body></html>