[strongSwan] IKE Phase 1 and Phase 2 parameters

Andreas Steffen andreas.steffen at strongswan.org
Sat Sep 5 07:30:29 CEST 2020

Hi Leroy,

the Phase 2 crypto proposals can be set with the "esp=" parameter in

Best regards


On 05.09.20 00:31, Leroy Tennison wrote:
> I either don't know what to look for on the web or am having trouble
> finding settings for IKE phase 1 and phase 2 negotiation.  It seems that
> the '"ike=" ipsec.conf parameter specifies settings for Phase 1 but I'm
> not finding anything for Phase 2 for Strongswan.  Other IPSec
> implementations seem to use phase2alg for this but Strongswan either
> doesn't have this setting or it has another name for it.
> Can someone explain (or send me a link to an explanation) of how these
> are decided in Strongswan?  Thanks for your help.
> Harriscomputer
> *Leroy Tennison
> *Network Information/Cyber Security Specialist
> E: leroy at datavoiceint.com
> P:
> 2220 Bush Dr
> McKinney, Texas
> 75070
> www.datavoiceint.com <http://www..com> 
> This message has been sent on behalf of a company that is part of the
> Harris Operating Group of Constellation Software Inc.
> If you prefer not to be contacted by Harris Operating Group please
> notify us <http://subscribe.harriscomputer.com/>.
> This message is intended exclusively for the individual or entity to
> which it is addressed. This communication may contain information that
> is proprietary, privileged or confidential or otherwise legally exempt
> from disclosure. If you are not the named addressee, you are not
> authorized to read, print, retain, copy or disseminate this message or
> any part of it. If you have received this message in error, please
> notify the sender immediately by e-mail and delete all copies of the
> message.
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Networked Solutions
HSR University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

More information about the Users mailing list