[strongSwan] disable sending vendor id

Marco Berizzi pupilla at hotmail.com
Tue Jan 18 10:38:49 CET 2022


Hello Tobias,

thank you for your kind reply.

Undoubtedly the message reported by
microsoft about the introduction of
regression is rather unclear.

Marco

From: Tobias Brunner <tobias at strongswan.org>
Sent: Monday, January 17, 2022 2:49 PM
To: Marco Berizzi <pupilla at hotmail.com>; users at lists.strongswan.org <users at lists.strongswan.org>
Subject: Re: [strongSwan] disable sending vendor id 
 
Hi Marco,

> kindly, I would like to know if there is a way to
> make strongswan not send the 'vendor id'.

There is currently no option to generally disable Vendor IDs as some are 
basically integral part of IKEv1 e.g. to use XAuth or DPDs, and 
especially to negotiate NAT-Traversal (only the strongSwan and Cisco 
Unity vendor IDs can be disabled with individual settings, both are 
disabled by default).

Better use IKEv2 anyway.

Regards,
Tobias


More information about the Users mailing list