On Friday 14 March 2003 1:37 pm, Andrea Frigido wrote: > try with > ike=aes128-sha,aes128-md5 > option into your connection section into /etc/ipsec.conf Thanks, but won't that only affect the encryption used by ike rather than ipsec? Iain