> On May 20, 2015, at 10:06 AM, Jonathan Adams <[email protected]> wrote: > > Thanks for the heads up ... we have quite a few IKE/ipsec connections, > although static ip addresses are used. They've been in use since forever ... > > fortunately we use 5 for all the connections.
You should really move up to 2048-bit MODP or use one of the 256-or-higher ECC groups. Do you have legacy reasons not to? Dan ------------------------------------------- illumos-discuss Archives: https://www.listbox.com/member/archive/182180/=now RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be Modify Your Subscription: https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4 Powered by Listbox: http://www.listbox.com
