<div dir="ltr">Thanks to Paul and Philippe's pointers. I tried the "oe" and spacing suggestion without success. when I do a "ipsec auto --add centos6-asa" to add connection manually. /var/log/ipsec.log only showing one line but no other message.<div>
<br></div><div style>I will keep digging</div><div style><br></div><div style>tj</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Mar 8, 2013 at 8:52 AM, Paul Wouters <span dir="ltr"><<a href="mailto:pwouters@redhat.com" target="_blank">pwouters@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Fri, 8 Mar 2013, Philippe Vouters wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Subject: Re: [Swan] Need debugging pointer between libreswan and ASA5550<div class="im"><br>
<br>
To add to Paul's remark, I am not quite sure whether oe=off is indeed correct. I would rather set it to oe=no.<br>
</div></blockquote>
<br>
Both work. It is defined as a kt_bool, so yes/on means 1, and everything<br>
else means no/off.<span class="HOEnZb"><font color="#888888"><br>
<br>
Paul<br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br>T.J. Yang
</div>