[Openswan Users] Trying to get Openswan working Ubuntu to Cisco ASA 5510
craig at blkbx.com
Tue Mar 9 13:57:34 EST 2010
> Is this DH group 2? Also I think "esp" is being obsolete, so dont
> use that. Well, you can try following:
> phase2=esp phase2alg=3DES-SHA1;modp1024
Avesh and I are saying the same thing about specifying the modpNBITS.
I'm using Ubuntu 9.10 server 64bit. I could only make the config work
with "A-B-C" (as in my previous message). The man pages say "A-B;C" as
Avesh has shown. But mine does not work with the semicolon, I get an
error about parsing of the config file failing when I try to start ipsec.
Also, Avesh makes a good point about the esp deprecation... All my
configs use "ike=..." and "phase2alg=..." and I here I recall the man
page being correct about which config keys are aliases to which others,
and which are deprecated.
More information about the Users