Differences between version 12 and previous revision of FreeSwanToCiscoPix.
Other diffs: Previous Major Revision, Previous Author, or view the Annotated Edit History
Newer page: | version 12 | Last edited on Friday, July 18, 2003 4:03:48 pm | by CraigBox | Revert |
Older page: | version 11 | Last edited on Friday, July 18, 2003 2:25:18 pm | by CraigBox | Revert |
@@ -58,9 +58,9 @@
''esp'' sets the [ESP] parameters. __This must be the same encryption and hashing algorithm you specify in your isakmp lines in the PIX config below.__
''keyexchange'' sets [IKE] (Internet Key Exchange) and can be set to nothing else.
-''pfs'' is PerfectForwardingSecrecy
. This needs to be set 'no' unless you specifically enable it on the PIX end[2]. When ipsec starts, automatically add this connection to pluto (__but this will not automatically create the tunnel.__)
+''pfs'' is PerfectForwardSecrecy
. This needs to be set 'no' unless you specifically enable it on the PIX end[2]. When ipsec starts, automatically add this connection to pluto (__but this will not automatically create the tunnel.__)
Next you need an ipsec.secrets file:
# This file holds shared secrets or RSA private keys for inter-Pluto