[Openswan Users] Cisco concentrator to openswan continued

ACasella antony.casella at sand.com
Wed Jun 13 17:49:13 EDT 2007


Hello,
I've managed to get the cisco admin to give me the following information:

Preshared Key: xxxxxxxxxxxxxxxxxxxxxxxx
Authentication: ESP/MD5/HMAC-128

Encryption: 3DES-168

Does this mean that I need to change my esp to ah in my conf?  and my 
modp1024 to 168?

I am very confused.

conf below:

    type=tunnel
    authby=secret
    left=72.55.xxx.xxx
    leftxauthclient=yes
    leftnexthop=%defaultroute
    right=137.186.yyy.yyy
    rightxauthserver=yes
    rightnexthop=%defaultroute
    ike=3des-md5-modp1024
    esp=3des-md5
    keyexchange=ike
    pfs=no
    xauth=yes
    auto=add


Thank you


More information about the Users mailing list