[vpn-help] What is the Cisco 3000 Concentrator support in 2.1.6 release?
Matthew Grooms
mgrooms at shrew.net
Mon Sep 20 16:48:01 CDT 2010
On 9/17/2010 9:12 AM, Jim R wrote:
> Hi, Matthew:
>
> I only have 2.1.6 installed, and I can see a line:
>
> ii : generating IPSEC security policies at REQUIRE level
>
> in the log. Should I try 2.1.7 instead? Is it stable enough for daily use?
>
Strange. That log output would lead be to believe that the client is
using 0.0.0.0/0 to negotiate the SA ( shared policy level ). This will
be the same as manually adding 0.0.0.0/0 as an include policy. I can't
think of a reason why using the policy trick would should any better :/
Maybe you should give 2.1.7 a try. If the 0.0.0.0/0 policy entry is
required, please send me some log output and I'll have a closer look.
-Matthew
More information about the vpn-help
mailing list