[Openswan Users] Openswan Cisco Interoperability

[Paul Wouters]

On Tue, 7 Aug 2007, Bholi Patra wrote:

> I have a test setup consisting of a cisco router on one end and a linux
> machine
> running openswan 2.4.9.
>
> The Cisco machine is configured to run in tunnel mode while openswan is
> configured
> for transport mode. Both use 3des and md5 for encryption and hash.
>
> I see the following behaviour.
> An ipsec tunnel comes up and I'm able to send ping packets to and from cisco
> router.
>
> Is it an expected behaviour? Shouldnt ipsec connection fail since the end
> points are
> operating in different mode?

Which machine is the responder? I have a feeling it will be the cisco one,
because openswan should fail to setup such a tunnel.

Paul

-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155