linux ipsec ike问题

chentanyu

不知道怎么回事，我的Linux版本是：Linux vmware 2.6.18-194.el5
                                       openswan:Linux Openswan U2.6.32


在协商ike时只发ike 1版本，按配置道理应该发ike 2来协商sa啊





配置文件如下/etc/ipsec.conf：
version        2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        # Debug-logging controls:  "none" for (almost) none, "all" for lots.
         klipsdebug=none
         plutodebug="control parsing"
        # For Red Hat Enterprise Linux and Fedora, leave protostack=netkey
        protostack=netkey
        nat_traversal=yes
        virtual_private=%v4:192.168.0.0/16,%v4:172.16.0.0/12
        oe=off
        # Enable this if you see "failed to find any available worker"
        # nhelpers=0

#You may put your configuration (.conf) file in the "/etc/ipsec.d/" and uncomment this.
include /etc/ipsec.d/*.conf

在etc/ipsec.d/aa.conf
连接文件：
  conn aa
type=tunnel
#Define your IKE policy
authby=secret
keyingtries=0
ike=3des-md5;modp1024
ikelifetime="28800"
#Define IPsec Policy
auth=esp
esp=3des-md5
keylife="3600"
#Define Local then Remote Gateway & proxy-id
left=10.95.100.102
leftsubnet=172.16.20.0/24
# leftid=
leftnexthop=%defaultroute
right=211.144.XX
# rightid=
rightsubnet=192.168.0.0/24
rightnexthop=211.144.XX
compress=no
#Start the tunnel on boot
auto=start

chentanyu

终于找打原因

ikev2=yes；

这样就好了。