> On May 20, 2015, at 10:06 AM, Jonathan Adams <[email protected]> wrote: > > Thanks for the heads up ... we have quite a few IKE/ipsec connections, > although static ip addresses are used. They've been in use since forever ... > > fortunately we use 5 for all the connections.
You should really move up to 2048-bit MODP or use one of the 256-or-higher ECC groups. Do you have legacy reasons not to? Dan _______________________________________________ OmniOS-discuss mailing list [email protected] http://lists.omniti.com/mailman/listinfo/omnios-discuss
