[Openswan Users] controlling ISAKMP transform proposals

Ken Bantoft ken at xelerance.com
Thu Apr 29 06:38:27 CEST 2004


I'm assuming Openswan 1.x here.  IIRC, you just prefix the the the 
cipher/hash combo with !

ie: esp=!aes128-md5-modp1536

On Wed, 28 Apr 2004, David Mattes wrote:

> Hi,
> 
> How can I control which ISAKMP proposals are included in the main mode 
> initiation?
> 
> Specifically, I want to prevent AES128 with DH group 5 from being a 
> OAKLEY_GROUP_DESCRIPTION proposal from my openswan peer.
> 
> Thanks,
> David

-- 
Ken Bantoft			VP Business Development
ken at xelerance.com		Xelerance Corporation
sip://toronto.xelerance.com	http://www.xelerance.com

The future is here. It's just not evenly distributed yet. 
        -- William Gibson




More information about the Users mailing list