[Openswan Users] Key replaceing

[Paul Wouters]

On Mon, 10 Dec 2007, Christian Herzberg wrote:

> > The other end will have a log entry saying "sending informational payload
> > NO_PROPOSAL_CHOSEN". The line before that should be the reason why it
> > didnt pick the proposal.
> Hi Paul,
>
> I found the log of my Linksys WRV200. This is what it is saying.
>
> 1616   [Fri 19:21:16]  "TunnelA" #8027: IPsec Transform [ESP_AES (128),
> AUTH_ALGORITHM_HMAC_SHA1] refused due to strict flag

So it seems it is refusing the proposal esp=aes,sha1. this is part of
the list of default proposals of Openswan. You might want to change
that setting on the linksys, or match what it wants precisely on the
openswan side, eg  esp=3des,md5 or something.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155