onitake commented on issue #3138: StrongSwan with several rightsubnet's - ikev1 URL: https://github.com/apache/cloudstack/issues/3138#issuecomment-495784719 If I read this right, the UI presents the following cipher suites (according to https://github.com/apache/cloudstack/blob/4.11.2.0/ui/scripts/network.js#L5884-L6078 ): * IKE.encryption, ESP.encryption * aes128 * aes192 * aes256 * 3des * IKE.hash, ESP.hash * sha1 * sha256 * sha384 * sha512 * md5 * IKE.DH, perfect.forward.secrecy * modp1536 (group 5) * modp2048 (group 14) * modp3072 (group 15) * modp4096 (group 16) * modp6144 (group 17) * modp8192 (group 18) * modp1024 (group 2) It seems like I misunderstood @dudarra , and the issue lies with the Riverbed appliance? StrongSwan can support more ciphers though, provided that the appropriate plugins are installed: https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites As for updating the documentation, I'll give it a shot.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
