[Openswan Users] Re: Please help me to identify problem...

[Paul Wouters]

On Tue, 7 Feb 2006, utkarsh shah wrote:

>     want ur help to identify a problem and some hint towards solution ??
>
>     i want to establish a roadwarrior connection using presharedkey in aggressive mode. use openswan 2.4.2 and greenbow 2.51 as client

I strongly recommend you upgrade to 2.4.4 or 2.4.5rc4.

>   conn test_conn
>           aggrmode=yes
>           ike="3DES-MD5-modp1536,3DES-SHA1-modp1536,AES128-SHA1-modp1536"
>           esp="3DES-MD5,3DES-SHA1,AES128-SHA1"

You cannot "negotiate" in Aggressive Mode. You can only specify one option for
ike= and esp= and it has to be the right one.

Paul