[vpn-help] Nortel Contivity VPN

[Matthew Grooms]

On 2/8/2011 7:36 AM, Glen Di Persio wrote:
> I'm trying to connect to a Contivity VPN using Shrewsoft. The Contivity
> client connects with Diffie-Hellman group 8 (EC2N), while the Shrewsoft
> client only supports groups 1/2/5/14/15. The Contivity server will not
> respond to my initial ISAKMP packet from Shrewsoft. Is DH Group 8 a
> proprietary Nortel transform, or is it more widely used?
>

DH group 8 is based on Elliptic Curve Cryptography ...

http://tools.ietf.org/html/rfc4753
http://en.wikipedia.org/wiki/ECC_patents

This technology is quite arguably covered by patents so we have no plans 
to implement it.

-Matthew