On Tue, Mar 09, 2010 at 02:34:19PM -0500, Avesh Agarwal wrote: > > or you can remove this "esp=3DES-SHA1", and add following: > phase2=esp > phase2alg=3des-sha1-modp1024 To be precise, that's exactly what I did. No joy though. Best, Whit