Hi, How do I define in ipsec.conf to use Diffie Hellman Key Group 2 (1024 bit) in the first phase and no PFS in the second phase. Thanks and regards, Sikaru -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.openswan.org/pipermail/users/attachments/20060823/d17edc7f/attachment.html