Hi Hugo,<br>
<br>
Your ipsec.conf and ipsec.secrets file shall look like following:<br><br>ipsec.conf:<br><br>config setup<br> charonstart =yes<br> plutostart = no<br> uniqueids=no<br><br>conn Cisco<br> ikelifetime=24h<br> keyexchange=ikev2<br>
keyingtries=%forever<br> keylife=1h<br> mobike=no<br> reauth=no<br> rekeymargin=5m<br> ike=3des-sha1-modp1024!<br> esp=3des-sha1-modp1024!<br> left=y.y.y.y<br> right=x.x.x.x<br> authby=psk<br>
auto=start<br> <br>ipsec.secrets:<br>%any x.x.x.x : PSK "password"<br><br><br><div class="gmail_quote">On Tue, Dec 13, 2011 at 9:22 PM, Hugo Mora <span dir="ltr"><<a href="mailto:humoib@gmail.com">humoib@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Hi!</div><div><br></div><div>I'm not an expert on VPNs (java programmer), but I need to connect using StrongSwan my company with a client via VPN. They have send me these parameters (see below)... Could someone pleeease translate these parameters to a ipsec.conf connection ??</div>
<div><br></div><div>I know that the remote site is a CISCO VPN 3000 Series.</div><div><br></div><div>Really, thank you so much! I can't buy a CISCO</div><div><br></div><div><br></div><div><b>IKE Parameters</b></div><div>
Authentication: Preshared keys </div><div>Authentication Algorithm: SHA/HMAC-160</div><div>Encryption Algorithm: 3DES</div><div>Diffie-Hellman Group: 2 (1024 bits)</div><div>Lifetime Measurement: Time (86400) sec</div><div>
IKE peer: x.x.x.x</div><div>Negotiation mode: main</div><div><br></div><div><b>IPSEC Parameters</b></div><div>Authentication Algorithm: ESP/SHA-HMAC-160</div><div>Encryption Algorithm: 3DES</div><div>Mode: Tunnel</div><div>
Lifetime Measurement: Time (3600) sec.</div><div>PFS: Group 2 (1024 bits)</div><div><br></div><div>Bye,</div><div>--Hugo</div><br>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br>
<a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><br></blockquote></div><br><br clear="all"><br>-- <br>Regards,<br>
Vivek Bairathi<br>