[Openswan Users] openswan configuration

[Paul Wouters]

On Thu, 2 Sep 2010, Douglas Caro wrote:

> A company sent me some specifications on how should I set up openswan.

> Phase 2  Encapsulacion    AH + ESP    AH + ESP
>               Algoritmo de Encriptacion ESP    AES-256 AES-192 AES-128
> 3DES    AES-256 AES-192 AES-128 3DES

I hope they mean "esp" because ah+esp makes no real sense.

>               Algoritmo de Autenticacion ESP    Ninguno    Ninguno

google could not translate "Ninguno" for me....

>               Algoritmo de Autenticacion AH    MD5    MD5
>               Secreto de Reenvio Perfecto    Group 2    Group 2
>               Tiempo (para la renegociacion)    3600 segundos    3600
> segundos
>              Tiempo en KB (para la renegociacion)    any    any
>
> My main doubt is how to configure the phase 2.
>
> Can anyone help me?

I would try just esp=aes or esp=aes-md5;modp1024

Paul