[Openswan Users] Trying to get Openswan working Ubuntu to Cisco ASA 5510

Paul Wouters paul at xelerance.com
Wed Mar 10 13:57:17 EST 2010


On Wed, 10 Mar 2010, Whit Blauvelt wrote:

> Yeah, I know. But it turns out:
>
>     phase2=esp
>     phase2alg=3DES-SHA1
>     ike=3DES-SHA1
>
> works connecting to the Cisco, while
>
>     esp=3DES-SHA1
>     ike=3DES-SHA1
>
> fails. Most odd.

Could you confirm that with some good tests to ensure the cisco did
not keep any state or something? Those configs should be fully
equivalent.

Paul


More information about the Users mailing list