On Tue, 22 Jan 2008, kelvin wrote: > openswan use esp for encryption and authentication default, i want to use > ah for authentication only and not to enable esp encryption, > how can i modify my ipsec.conf will make it work? there are not many good reasons for doing ah, but if you must: auth=ah see 'man ipsec.conf' Paul