Public bug reported: When IPSec (openswan/libreswan/strongswan) creates a Ike policy, you can choose one of the phase1-negotiation-mode: main or aggressive. However, vpnaas can only select main, a mode, and cannot be modified.
When using IPSec (for example, libreswan) and the IKE version uses V1, phase1-negotiation-mode uses main, and the IPSec connection does not support the NAT schema. However, phase1-negotiation-mode is modified as aggressive mode, and the IPSec connection can traverse NAT. ** Affects: neutron Importance: Undecided Assignee: Li Xiao (leeshow) Status: In Progress ** Changed in: neutron Assignee: (unassigned) => Li Xiao (leeshow) ** Changed in: neutron Status: New => In Progress -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1701413 Title: Vpnaas VPN ikepolicy does not support aggressive mode Status in neutron: In Progress Bug description: When IPSec (openswan/libreswan/strongswan) creates a Ike policy, you can choose one of the phase1-negotiation-mode: main or aggressive. However, vpnaas can only select main, a mode, and cannot be modified. When using IPSec (for example, libreswan) and the IKE version uses V1, phase1-negotiation-mode uses main, and the IPSec connection does not support the NAT schema. However, phase1-negotiation-mode is modified as aggressive mode, and the IPSec connection can traverse NAT. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1701413/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp