[Openswan Users] How to force "best-match" for connections?

Tarountaev Evgueni tarountaev at aist.com
Wed Nov 3 10:19:26 CET 2004


I have two connections into my ipsec.conf file

conn roadwarrior-l2tp-updatedwin
        pfs=no
        leftprotoport=17/1701
        rightprotoport=17/1701
        also=roadwarrior

conn roadwarrior-l2tp
       pfs=no
       leftprotoport=17/0
       rightprotoport=17/1701
       also=roadwarrior

But when I initiate connection form Windows XP SP2 client, I see that the
"roadwarrior-l2tp" connection choosing. Order into ipsec.conf file does not
matter.

So how to force "best-match" for connections?

-- 
Evgueni Tarountaev

 



More information about the Users mailing list