I was hoping that someone might aid me in providing a best practice when setting up a tunnel between two devices connecting two lans.
Is it best to specify one and only one combination of encryption schemes for this tunnel (i.e.: ike=aes256-sha2_256-ecp512bp) or multiple options? This is presuming that you know what options each side supports. In other words, which aids in reliability and avoiding problems: limiting the options down to one combination, or providing multiple choices? Thank you, Tom _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users