• view
• edit
• upload
• print
• history

ature enables aggressive mode Phase 1 negotiations. Acceptable values are "yes" and the default "no".

Example:

conn home-to-buddy
        left=192.168.1.101
        leftnexthop=192.168.1.1
        leftid=@myhouse.mydomain.com
        right=10.0.0.101
        rightid=@hishouse.hisdomain.com
        keyexchange=ike
        auto=start
        auth=esp
        authby=secret
        pfs=no
        aggrmode=yes

Note

ike = is required when aggrmode equals "yes"; otherwise you'll get a message similar to following:

ipsec__plutorun: whack error: "home-to-buddy" can not specify aggressive mode without ike= to set algorithm