<div dir="ltr">How can I check if my ipsec service and my S.O. has ESP encryption support? I can only establish Phase 1 and 2 using 3des:<br clear="all"><div><br>    ike=3des-sha1-modp1024<br>    esp=3des-sha1<br><br># ipsec verify<br>Checking your system to see if IPsec got installed and started correctly:<br>Version check and ipsec on-path                                 [OK]<br>Linux Openswan U2.6.38/K3.13.0-29-generic (netkey)<br>Checking for IPsec support in kernel                            [OK]<br> SAref kernel support                                           [N/A]<br> NETKEY:  Testing XFRM related proc values                      [OK]<br>    [OK]<br>    [OK]<br>Checking that pluto is running                                  [OK]<br> Pluto listening for IKE on udp 500                             [OK]<br> Pluto listening for NAT-T on udp 4500                          [OK]<br>Checking for 'ip' command                                       [OK]<br>Checking /bin/sh is not /bin/dash                               [WARNING]<br>Checking for 'iptables' command                                 [OK]<br>Opportunistic Encryption Support                                [DISABLED]<br><br><br>-- <br><div class="gmail_signature">Att.<br>Bruno Galindro da Costa<br></div>
</div></div>