[vpn-help] What is the Cisco 3000 Concentrator support in 2.1.6 release?

Matthew Grooms mgrooms at shrew.net
Mon Sep 20 16:48:01 CDT 2010


On 9/17/2010 9:12 AM, Jim R wrote:
> Hi, Matthew:
>
> I only have 2.1.6 installed, and I can see a line:
>
> ii : generating IPSEC security policies at REQUIRE level
>
> in the log. Should I try 2.1.7 instead? Is it stable enough for daily use?
>

Strange. That log output would lead be to believe that the client is 
using 0.0.0.0/0 to negotiate the SA ( shared policy level ). This will 
be the same as manually adding 0.0.0.0/0 as an include policy. I can't 
think of a reason why using the policy trick would should any better :/

Maybe you should give 2.1.7 a try. If the 0.0.0.0/0 policy entry is 
required, please send me some log output and I'll have a closer look.

-Matthew



More information about the vpn-help mailing list