The only allowed pfs parameters in openswan 2.4.4 are pfs=no or yes. When I choose anything other than Phase 1 group at the web conf of IPSEC VPN the pfsgroup paramter is wrongly set in ipsec.conf. In 2.4.4 the pfsgroup is always the Phase 1 group.
Thomas >>> "Thomas Heimann" <[EMAIL PROTECTED]> 24.11.2006 08:22 >>> Hi, I have to connect to a checkpoint FW with IPSEC (Net2Net , PSK). After configuring and starting the tunnel, I get this in /var/log/messages Nov 23 15:52:30 gateway ipsec__plutorun: ipsec_auto: fatal error in "Tunnel": (/etc/ipsec.conf, line 24) unknown parameter name "pfsgroup" This error is documented for openswan 2.4.0 but with EFW 2.0 2.4.4 is installed. Would 2.4.7 solve the problem ? TIA Thomas -------------------------------------------------------------- SHS-Concept GbR Dipl.-Ing. Thomas Heimann Hagener Str.57 D-58642 Iserlohn Germany Tel.: +49 +2374 9209776 Mobil: 0160 94773968 Fax: +49 +2374 9209778 Ust-ID:DE813360908 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user -------------------------------------------------------------- SHS-Concept GbR Dipl.-Ing. Thomas Heimann Hagener Str.57 D-58642 Iserlohn Germany Tel.: +49 +2374 9209776 Mobil: 0160 94773968 Fax: +49 +2374 9209778 Ust-ID:DE813360908 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user
