[Openswan Users] Openswan 2.1.2 Features and questions

Florent PREVITALI florent.previtali at solsoft.com
Mon May 17 15:58:42 CEST 2004


Hello,

I need to choose an IKE implementation which work with 26sec to integrate in a 
project.

I like new features like xauth and virtual ip, but i have some questions about 
basic features and the site.

On this page http://www.openswan.org/docs/feature_comparison.php
        there is Openswan 1.x but not Openswan 2.x.

        I have read that Openswan 2.x support only : 
                DH 2 and 5,
                3DES, MD5, SHA1.

                In 2.2, there will be AES, for phase 1 and 2 ?.
                It does not manage all algos managed by 2.6 cryptoapi for 
phase 2  (ipsec 
SA) ? 
                
                On this page, 
http://wiki.openswan.org/index.php/CiphersAndHashes, i see 
ike=aes128-sha2_256-modp2048 : Is openswan 2.2.0 managing sha2 ? Is this 
option enabling to enable and sort proposals, or is there no way to specify 
for a connection, a choice or an order for proposals ?

        For Virtual IP, will there be a way to use a pool of IPs for 
roadwarriors ? 
(for example, to use with xauth)

Scuse me if there are too much questions here :o)

Florent


More information about the Users mailing list