Sean Knox wrote:

I almost have a working VPN between isakmpd and a Netscreen box-- things fail at phase 2 as the peers enter quick mode.

The problem was a bug in isakmpd with the way it handled attributes like lifetime. I've been testing a patch from Hans-Joerg and it's been working fine ever since. A proper commit should be in -current soon. Thanks to everyone that responded.

cheers,
sk

Reply via email to