6 lines
480 B
Plaintext
6 lines
480 B
Plaintext
The roadwarrior <b>carol</b> proposes <b>3DES</b> encryption with <b>SHA-1</b> authentication in the first place
|
|
and <b>AES-128</b> encryption with <b>SHA-1</b> authentication in the second place for both the ISAKMP and IPsec SA.
|
|
The gateway <b>moon</b> enforces <b>ike=aes-128-sha!</b> for Phase 1 by using the strict flag '!',
|
|
but will accept any other supported algorithm proposed by the peer for Phase 2 , even though <b>moon</b>
|
|
defines itself <b>esp=aes-128-sha1</b> only.
|