On Sat, 7 Jan 2006, Brendan Simon wrote: > Fixed it. > Need to drop the "1" from "sha1" in the ike statement. > > ike=aes256-sha > esp=aes256-sha1 > > Not sure why. Also whack still seems to show sha256. Any ideas why? > Anyhow, it's working :) I've filed a bug report on this. Thanks, Paul