Re: IPsec debugging

[Frank Wille <frank%phoenix.owl.de@localhost>]

Thor Lancelot Simon wrote:

> Windows notebooks you say.  Are you *sure* it is not expecting a
> proposal for transport mode IPsec with L2TP inside, rather than tunnel
> mode IPsec?

Yes. It is definitely ESP tunnel mode. I got the following information from
the router config and Lancom administrator:

- main mode IKEv1
- IKE DH-group 2 (1024 bits)
- PFS Group 2 (1024 bits)
- Phase 1 IKE AES 128 bits MD5
- Phase 2 IPSec AES 128 bits MD5
- Phase 2 Tunnel Mode ESP
- IKE Config Mode
- NAT-T Port 4500
- signed certificates

-- 
Frank Wille