[Openswan Users] IOS Cisco - bug
David Prestwich
dprestwich at pacsim.com
Wed Feb 11 08:41:50 CET 2004
Hello all,
I am using an outdated freeswan 1.95 that works great but doesn't have
all the functionality that the newer versions have. (I plan on
upgrading just need the time and resources). I've ran into a little
snag with a cisco IOS version 12.2 this past week and I know that it is
a fault in the way it runs their proposal. In essence, freeswan sends
out all the proposals as it should yet IOS fails on the first proposal
of 3DES because the domain admin on the other side has set the
configuration to DES. I asked if he would switch this to 3DES but he
states he can't until he does an upgrade on their side to allow 3DES.
During the connection the SA is established but no proposal is chosen
because their side does not want to get set to 3DES. I can use DES on
my 1.95 version and am using it currently with several sites. My
question is: (and I'm pretty sure I know the answer) can I set 1.95 to
tell it which level of encryption to use? I know in the newer version
you can define say DES or 3DES but can you do this with the older ones?
I don't think that you can. Any feedback would be great. Thanks.
/David
More information about the Users
mailing list