-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

am reusit cu 3DES/MD5 dar fara PFS, cu PFS nu merge
e un BEFVP41

lonely wolf wrote:
| Dan Candea wrote:
|
|
|>-----BEGIN PGP SIGNED MESSAGE-----
|>Hash: SHA1
|>
|>salut
|>
|>vreau sa fac un VPN net-net cu un Linksys legat la un FreeSWAN pe linux, 
autentificare prin PFK
|>a mai facut cineva asa ceva?
|>iata ce eroare primesc pe linux:
|>
|>~ #17: responding to Main Mode
|>~ #17 OAKLEY_DES_CBC is not supported.  Attribute OAKLEY_ENCRYPTION_ALGORITHM
|>~ #17 OAKLEY_DES_CBC is not supported.  Attribute OAKLEY_ENCRYPTION_ALGORITHM
|>~ #17: next payload type of ISAKMP Identification Payload has an unknown value: 116
|>~ #17: probable authentication failure (mismatch of preshared secrets?): malformed 
payload in packet
|>~ #17: next payload type of ISAKMP Identification Payload has an unknown value: 116
|>~ #17: probable authentication failure (mismatch of preshared secrets?): malformed 
payload in packet
|>~ #17: next payload type of ISAKMP Identification Payload has an unknown value: 116
|>~ #17: probable authentication failure (mismatch of preshared secrets?): malformed 
payload in packet
|>~ #16: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible 
authentication failure: no acceptable response
|>to our first encrypted message
|>
|>
|>
|
| am eu functional. am pornit de aici:
| http://www.freeswan.org/freeswan_trees/freeswan-2.06/doc/interop.html#linksys
| ce model de linksys e? alea chioare nu stiu decit de preshared key.
| uite setare de freeswan care merge la mine (linksys are ip dinamic):
| conn linksys
|         right=%any
|         rightsubnet=192.168.11.0/24
|         rightnexthop=1.1.1.1
|         left=a.b.c.d
|         leftsubnet=192.168.100.101/32
|         leftnexthop=a.b.c.1
|         keyexchange=ike
|         ikelifetime=240m
|         keylife=60m
|         pfs=yes
|         compress=no
|         authby=secret
|         auto=add
|
|


- --
Dan Candea
Be different.think
0xD9241077 at pgp.mit.edu
http://www.e-bizz.ro


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFA2T2caKesMdkkEHcRAu+AAKDHViolXYqF8ZmXpOp29YsuCZk3YwCg9BWG
0Y4GBS1iPcdQIYVosLUmPhE=
=dL0k
-----END PGP SIGNATURE-----

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui