<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Having said that, If you put nothing in Openswan, it should follow
anything the Sonicwall requests. When I last used Openswan (2.6.38 -
I converted to Libreswan) it was very lax in what it would accept.
Even if you specified something in Openswan, if the other end
demanded something else, Openswan would allow the connection. I am
not sure if the something else had to be better that what was
specified in Openswan. E.g if I configured Openswan to
aes128-modp1536 it would accept a connection from aes256-modp2048.<br>
<br>
Nick<br>
<br>
<div class="moz-cite-prefix">On 16/05/2014 14:20, Simon Deziel
wrote:<br>
</div>
<blockquote cite="mid:53761082.7090106@xelerance.com" type="cite">
<pre wrap="">
Hi James
On 14-05-16 08:53 AM, Patrick Naubert wrote:
</pre>
<blockquote type="cite">
<pre wrap="">*From: *James Calfee <<a class="moz-txt-link-abbreviated" href="mailto:james@jcalfee.info">james@jcalfee.info</a> <a class="moz-txt-link-rfc2396E" href="mailto:james@jcalfee.info"><mailto:james@jcalfee.info></a>>
*Subject: **openswan and sonicwall*
*Date: *May 14, 2014 at 4:04:07 PM EDT
*To: *users@lists.openswan.org <a class="moz-txt-link-rfc2396E" href="mailto:users@lists.openswan.org"><mailto:users@lists.openswan.org></a>
Does openswan support DH Group 2?
I'm reading a post that says the sonicwall must be set to Group 5 to
work with openswan. If you don't support Group 2, I would like to hear
your thoughts. I would like to make a case for the system administrator
to see if I can get it changed.
Group 2 (1024 bits)
Group 5 (1536 bits)
</pre>
</blockquote>
<pre wrap="">
Both (and more) are supported. The details on how to use them are in
"man 5 ipsec.conf". Searching for "modp" in the man page should put you
on track.
HTH,
Simon
_______________________________________________
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.openswan.org">Users@lists.openswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.openswan.org/mailman/listinfo/users">https://lists.openswan.org/mailman/listinfo/users</a>
Micropayments: <a class="moz-txt-link-freetext" href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a>
Building and Integrating Virtual Private Networks with Openswan:
<a class="moz-txt-link-freetext" href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a>
</pre>
</blockquote>
<br>
</body>
</html>