Re: [Users] Problem with Cisco 3000

On Thu, 9 Oct 2003, Ken Bantoft wrote:

> -----BEGIN PGP SIGNED MESSAGE-----

Yes, I noticed the default values for ikelifetime and keylife appear to be reversed compared to Cisco. Been meaning to ask about that. I think FreeS/WAN should try to match industry standards (read Cisco) defaults even if it is not mandated in the IPSEC RFC. OTOH I am the one asking for help here so maybe my opinion is not needed :-)

Thanks Sam and Ken for your help. I used tcpdump to discover a mistake in my firewall. Details provided on request...

Best Regards,

-- 
Andrew - Iron-Bridge Communications, INC.

_______________________________________________
FreeS/WAN Users mailing list
users@lists.freeswan.org
https://mj2.freeswan.org/cgi-bin/mj_wwwusr