Subject: Re: IPsec and key length
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
From: Secret Asian Man <cchen@nougat.org>
List: current-users
Date: 06/12/2000 20:29:33
On Tue, Jun 13, 2000 at 12:16:23PM +0900, Jun-ichiro itojun Hagino wrote:
>if cisco document mentions "pre-shared key", that is for use with
>IKE (ipsec key negotiation protocol).  you need to bring in
>pkgsrc/security/racoon.
>
>setkey is for "manual keys" (<-> automatic negotiation by IKE).

Okay, so even if they set the key manually on the router (via crypto isakmp key <longstring> address <myaddr>) I get to use IKE?

Somehow this makes me much happier.

cc

-- 
Christopher Kyin-hwa Chen <cchen@nougat.org>
<http://www.nougat.org/~cchen/>
George Gordon, Lord Byron says: "One of the pleasures of
reading old letters is the knowledge that they need no answer."