[Openswan Users] Netscreen Interoperability.

[Nico Baggus]

It works quite good with preshared keys....

I have no experience with RSA (not sure netscreen knows these beasts...

HIH,
Nico



On Wednesday 13 October 2004 13:54, Rituraj Buddhisagar wrote:
> Hi all;
>
> I am new to openswan. I have configured Openswan of FC2 with
> openswan-2.2.0-2fc2.i386.rpm.
> We need to interoperate with Netscreen 5xt with Openswan. How do I edit
> /etc/ipsec.conf?
> The doc says to edit as follows:
>
> conn net-to-net
>     left=192.168.0.1                 # Local vitals
>     leftsubnet=192.168.0.0/24      #
>     leftid=@nevisvpn01.pune.nevisnetworks.com         #
>
>     leftrsasigkey=xxxxxxxxxxxxEXISTING KEY OF THIS
> HOSTxxxxxxxxxxxxxxxxxx
>
>     leftnexthop=%defaultroute      # correct in many situations
>     right=192.168.2.1                # Remote vitals
>     rightsubnet=192.168.2.0/24        #
>     rightid=@ab.example.com        #
>
>     rightrsasigkey=0sAQOqH55O...   #
> ????????How do I find this out?
>
>     rightnexthop=%defaultroute     # correct in many situations
>     auto=add                       # authorizes but doesn't start this
>                                    # connection at startup
>
>
> How do I find out righthost rsa key on netscreen ? I googled but did not
> succeed.
> Please do let me know.
>
> Regards;
> Rituraj