On 21.09-16:47, Christoph Leser wrote:

[ ... ]

quoted text
> > >[low-crypto-quick]

> > >DOI=                    IPSEC

> > >EXCHANGE_TYPE=          QUICK_MODE

> > >Transforms=             QM-ESP-DES-MD5-SUITE

[ ... ]

quoted text
>  Maybe there is a problem with your isakmpd.conf:

[ ... ]

quoted text
>   names  QM-ESP-DES-MD5-SUITE  !!

>  so maybe it should be

>

>  [low-crypto-quick]

>  DOI=                    IPSEC

>  EXCHANGE_TYPE=          QUICK_MODE

>  Suites=                 QM-ESP-DES-MD5-SUITE

>

>  i.e. transforms is not a valid parameter in the

>  IPsec-configuration section

you were spot on.  i'm a little confused as to how my other tunnels

are working and also what the difference between transforms and suites

are but i _think_ that transforms are for phase-1 and suites are for

phase-2.  still not quite sure the deliniator there but thanks again

... working like a charm.
--

        t

 t

                 w