[Openswan Users] Trying to get Openswan working Ubuntu to Cisco ASA 5510

Craig Constantine craig at blkbx.com
Tue Mar 9 13:51:50 EST 2010


> Thanks Avesh. I'm looking. But I can't see the mismatch yet. The
> Cisco (I'm told) is set like this:
>
> IPsec Phase I: pre-g2-3des-sha-86400s IPsec Phase II:
> pfs2-esp-3des-sha-28800s
>
> And my ipsec.conf looks like this:
>

I'm not working with Cisco, but I wound up specifying the size too...

  ike=3des-sha1-modp1024

(or modp512, modp2048, etc) to get one of my SA's connected.

-craig




More information about the Users mailing list