[Openswan Users]

[Gavin Henry]

<quote who="Paul Wouters">
> On Fri, 10 Feb 2006, Gavin Henry wrote:
>
>> What's the best way to start? Try different configs and see what errors
come back?
>
> Well, configure things properly is the best way to start :)
> In general, try to stick to good defaults. 3DES or AES, Main Mode, DH
group 2 or 5 (modp1024/modp1524). Disable IPsec passthrough, disable
1DES, disable any keep alive options until you have a working
connection.

Ah, thanks.

>
>> It's a Billion 7560. We have the manual, but it's not that great for
detailed info.
>
> I have never used or heard about them.

We get them from www.solwise.co.uk. Quote popular here.

>
>> We are just waiting for the Openswan book, so hopefully that has some good
>> bits on hardware VPN servers etc.
>
> It explains the issues with some hardware vendors, and explains a few
common
> issues with certain brands, so it should give you a good general background
> to handle devices that aren't explicitely talked about (which is the
case for
> you, since I've never heard of this brand before)
>
> Paul
>

Thanks Paul. Look forward to the book arriving.

Shouldn't it be out by now?

Gavin.

-- 
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 742001
E ghenry at suretecsystems.com

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/